CN101414284A - Data protection method and access authority management method thereof - Google Patents

Abstract

A data protection method includes checking whether a preset external storage device is connected to a computer system when the computer system is powered off. When the preset external storage device is judged to be connected to the computer system when the computer system is powered off, the data of a preset section in the storage device is backed up to the preset external storage device, and backup data is generated. Writing a special data template into the preset section to cover the original data in the preset section.

Description

Data protection method and access right management method thereof

technical field

The invention relates to a data protection method, in particular to a data protection method and a management method of access authority.

Background technique

With the advancement of technology, computer systems have become an indispensable tool in daily life, and computer systems have also developed a variety of storage devices to store data. Generally speaking, users often store a lot of important data in storage devices, such as personal data, meeting reports, company secrets, and so on. However, when the storage device is lost, important data of the user will be leaked.

In order to prevent the above-mentioned situation from happening, storage devices with password protection functions appear on the market. The controller in the storage device with password protection function can lock or unlock the storage device according to the special command issued by the Basic Input Output System (BIOS). Although the known technology can use passwords to protect the data stored in the computer system, it is not safe. Because the storage device supports the password function of the storage device, the data password it protects is still stored on the circuit board of the storage device itself. Therefore, in some cases, for example, after the storage device is disassembled, an identical circuit board is used to replace the original circuit board of the storage device, and then installed back into the computer system, the data in the storage device can still be effectively accessed.

Therefore, there is still room for improvement in the data protection measures of the current data storage devices.

Contents of the invention

The invention provides a data protection method, which can protect the data in the storage device when the computer system is shutting down.

The invention provides a data protection method, which can protect the data in the storage device when the operating system of the computer system is in the state of dormancy, power saving and user logout.

The present invention provides a management method of storage device access rights, which can protect the data in the storage device when the computer system is shutting down or the operating system of the computer system is in the state of dormancy, power saving or user logout.

The invention proposes a data protection method suitable for a computer system, wherein the computer system includes a storage device. The protection method includes the following steps: when the computer system is shutting down, check whether the preset external storage device is connected to the computer system. When it is judged that the default external storage device is connected to the computer system when the computer system is shutting down, the data of a preset section in the storage device is backed up to the default external storage device, and a backup data is generated, and then written into a special The data template is inserted into the preset section to cover the original data in the preset section.

From another point of view, the present invention provides a data protection method suitable for a computer system, wherein the computer system includes a storage device. The protection method includes the following steps: when the operating system of the computer system is not in normal use state, check whether the preset external storage device is connected to the computer system. When it is judged that the default external storage device is connected to the computer system when the operating system is not in normal use, then the data of a preset section in the storage device is backed up to the default external storage device, and a backup data is generated, and then written Import a special data template into the default section to cover the original data in the default section.

From yet another point of view, the present invention provides a method for managing access authority of a storage device, which is suitable for managing a computer system with multiple storage devices. The management method includes the following steps: when the computer system is shutting down or the operating system of the computer system is in an abnormal state, checking whether the preset external storage device is connected to the computer system. When the inspection finds that the preset external storage device has been connected to the computer system, then select at least one of the above-mentioned storage devices to back up the data in a preset section to the default external storage device, and generate a backup data, and then write Importing a special data template into the preset section to overwrite the original data in the preset section, so that the data in the selected storage device cannot be accessed normally.

The beneficial effect of the present invention is that the present invention backs up the data of a preset section in the storage device by defaulting the external storage device, and then uses a special data template to cover the original data in the above-mentioned preset area to realize data The role of protection. However, before the data in the above-mentioned preset area has not returned to the original data, when using the computer system to read data from the storage device, because the data in the above-mentioned preset section is still a special data template, the computer system cannot Perform normal access to the data in the above-mentioned preset section of the storage device. Therefore, the present invention can effectively protect the data stored in the storage device.

In order to make the above-mentioned features and advantages of the present invention more comprehensible, preferred embodiments are specifically cited below and described in detail with reference to the accompanying drawings.

Description of drawings

FIG. 1 is a block diagram showing the system architecture of a computer system according to an embodiment of the present invention.

2A and 2B are flowcharts of a data protection method according to an embodiment of the present invention.

3A and 3B are flowcharts of a data protection method according to another embodiment of the present invention.

4A and 4B are flowcharts of a method for managing storage device access rights according to an embodiment of the present invention.

FIG. 5 is a partial structural block diagram of another computer system according to an embodiment of the present invention.

Detailed ways

FIG. 1 is a block diagram showing the system architecture of a computer system according to an embodiment of the present invention. Referring to FIG. 1 , the computer system 100 provided by this embodiment may include a central processing unit 110, a chipset 120, a memory 130, a storage device 140, and a Basic Input Output System (hereinafter referred to as BIOS) unit 150. The CPU 110 mentioned above can be coupled to the chipset 120 . Generally speaking, the chipset 120 may include a north bridge chip and a south bridge chip. Thereby, the CPU 110 can be coupled to the memory 130 , the storage device 140 and the BIOS unit 150 through the chipset 120 .

In this embodiment, the memory 130 can be a dynamic random access memory (DRAM), a static random access memory (SRAM), a synchronous dynamic random access memory (SDRAM) or a dual random access memory (DDRAM). In addition, the storage device 140 is, for example, a hard disk. In other embodiments, the storage device 140 may be a flash memory. The above-mentioned BIOS unit 150 can be a flash memory or a read-only memory, and the BIOS unit 150 stores related BIOS program codes.

In addition, in addition to the internal storage device 140 , the computer system 100 can also be connected to a preset external storage device 170 through the connection interface 160 . In some embodiments, the connection interface 160 can be a Universal Serial Bus (USB) interface, IEEE 1394 interface, SATA interface, or IDE interface, and the default external storage device 170 can be a non-volatile storage device with a corresponding connection interface. Non-volatile storage devices, such as pen drives.

In addition, the computer system 100 of this embodiment can perform a data protection program on the storage device 140 . The process of how to perform data protection on the storage device will be described below in conjunction with a flow chart.

FIG. 2A and FIG. 2B are flowcharts of a data protection method according to an embodiment of the present invention, which can be applied to the computer system 100 shown in FIG. 1 . Please first refer to FIG. 1 and FIG. 2A together. The data protection method provided by this embodiment can be realized by using the BIOS program in the computer system 100 (which may exist in the BIOS unit 150). When a user enables the protection method in the BIOS setting screen, the computer system 100 can perform a shutdown procedure as described in step S202. Wherein, the BIOS setting screen refers to the setting screen entered by the user by pressing a preset key (for example: F8 key) when the computer system 100 is turned on before entering the operating system.

When the computer system 100 enters the shutdown process, the CPU 110 of the computer system 100 will also execute the program code in the BIOS unit 150 to check whether the default external storage device 170 is connected to the computer system 100 (step S203). In some embodiments, the computer system 100 can determine whether the default external storage device 170 is connected to the computer system 100 by detecting the state of a default flag. Wherein, the above-mentioned preset flag can be stored in the buffer of the central processing unit 110 or in the memory 130 (not shown in the figure).

For example, if the state of the default flag is 1, it means that the default external storage device 170 has been connected to the computer system 100 ("Yes" in step S203).

In step S204 , the computer system 100 backs up the data of a predetermined segment in the storage device 140 to the default external storage device 170 and generates a backup data. In this embodiment, the storage device 140 is, for example, a hard disk. Therefore, the above-mentioned data in the preset section may be the data in the main boot sector in the hard disk.

In addition, if the state of the preset flag is 0, it means that the preset external storage device 170 may not be connected to the computer system 100 ("No" in step S203), and then the computer system 100 directly shuts down (step S206).

As mentioned above, in step S205, the BIOS program code executed by the computer system 100 controls related components in the computer system 100 (for example: the central processing unit 110 and the chipset 120) to write a special data template to the storage device 140 in the above-mentioned preset section, and overwrite the original data in the preset section, so as to realize the function of data protection. In this embodiment, the above-mentioned special data template may be a special character string or a coded character string that can be self-checked.

After step S205 is executed, the computer system 100 continues to execute related operations of the shutdown program to complete computer shutdown (step S206 ).

In this embodiment, the storage device 140 is implemented by a hard disk. Generally speaking, the data in the main boot sector of the hard disk includes the start address and end address of each sector of the hard disk. If the data in the main boot sector of the hard disk is damaged, the data in the hard disk cannot be deleted. access. In addition, in this embodiment, the default external storage device 170 is, for example, a USB flash drive. Therefore, with the data protection method provided by this embodiment, the user can remove the default external storage device 170 and carry it with him, preventing unauthorized users from reading the data on the storage device to be protected.

Afterwards, when the user intends to use the computer system 100 again, the user can use the default external storage device 170 to complete the boot process, wherein the default external storage device 170 is stored in the storage device 140 of the computer system 100 The data of the preset section. For further explanation, please refer to the following instructions.

Please refer to FIG. 1 and FIG. 2B together. When a user restarts the computer system 100, the computer system 100 performs a boot process as described in step S222. During the booting process, the program code in the BIOS unit 150 is executed to check whether the data in the preset section of the storage device 140 is special template data (step S223 ).

If the program code in the BIOS unit 150 checks that the data in the preset section of the storage device 140 is not a special data template ("No" shown in step S223), then the computer system 100 performs a normal boot procedure to complete the boot (step S227 ).

If the program code check in the BIOS unit 150 finds that the data in the preset section of the storage device 140 is a special data template ("Yes" in step S223), then the computer system 100 continues to execute step S224.

In step S224 , the program code in the BIOS unit 150 checks whether the default external storage device 170 is connected to the computer system 100 .

As mentioned above, since the data in the boot section of the storage device 140 has been covered by a special data template, if the program code in the BIOS unit 150 checks out that the default external storage device 170 may not be connected to the computer system 100 (step S224) ("No"), then the computer system 100 executes step S228 to interrupt the booting process, that is, the computer system 100 cannot complete the booting action by storing the original data of the main booting section of the device 140 at this time.

In other words, if the program code in the BIOS unit 150 detects that the default external storage device 170 is connected to the computer system 100 ("Yes" in step S224), then continue to execute step S225.

In step S225, the BIOS program code executed by the computer system 100 controls related components in the computer system 100 (for example: the central processing unit 110 and the chipset 120) to check whether the preset external storage device 170 is stored in the storage device 140. Backup data for the primary boot session.

If there is no backup data in the preset external storage device 170 ("No" shown in step S225), the computer system 100 executes step S228.

If the default external storage device 170 stores the backup data (that is, "Yes" marked in step S225), then the computer system 100 continues to execute step S226.

In step S226, the computer system 100 writes the backup data in the preset external storage device 170 back into the preset section of the storage device 140 through the connection interface 160 and the chipset 120, so as to restore the original data in the preset section, The action of enabling the storage device 140 to resume normal access. Then, the computer system 100 continues to execute the relevant booting procedures to complete the booting (step S227).

In the above-mentioned embodiment, the data protection operation of the storage device 140 is performed when the computer system 100 performs a shutdown procedure, but the present invention is not limited thereto. Another embodiment will be given below for illustration.

3A and 3B are flowcharts of a data protection method according to another embodiment of the present invention. Please first refer to FIG. 1 and FIG. 3A together. Different from the embodiment in FIG. 2A , the protection method provided by this embodiment can be implemented by an application program. When a user enables the protection method from the operating system of the computer system, and the operating system of the computer system 100 is installed on the computer system 100 when the computer system 100 enters an abnormal use state as described in step S302 The application program in can proceed to step S303 to check whether the preset external storage device 170 is connected to the computer system 100 .

In this embodiment, the aforementioned abnormal use state may be a sleep state, a power saving state or a user logout state. In addition, in some embodiments, the application program can determine whether the default external storage device 170 is connected to the computer system 100 by detecting the state of a default flag.

In addition, the process of judging whether the preset external storage device 170 is connected to the computer system 100 can refer to the description of the previous embodiment, and the steps S304 and S305 for data protection of the storage device 140 are the same as the steps S204 and S205 of FIG. 2A Or similar, so no more details. Finally, in step S306, the computer system 100 continues to perform related operations of the operating system in the abnormal use state. In this way, the present embodiment can still perform data protection on the storage device 140 .

Please refer to FIG. 3B , different from the embodiment in FIG. 2B , the protection method provided by this embodiment can also be implemented by using an application program. The difference between FIG. 3B and FIG. 2B is that the protection method in FIG. 2B is performed when the computer system 100 is turned on, while the protection method in FIG. 3B is performed when the operating system of the computer system 100 is restarted.

In addition, steps S223, S224, and S225 in FIG. 2B are actions in which the computer system 100 uses the program code in the BIOS unit 150 to check, while steps S323, S324, and S325 in FIG. 3B are actions in which the computer system 100 executes other application programs to check action. Therefore, the protection method in FIG. 3B can refer to FIG. 2B , so details are not repeated here.

Please continue to refer to FIG. 3B, since in step S323, the application program installed in the computer system 100 has checked out that the data in the main boot section of the storage device 140 has been covered by a special data template, so when performing steps S324 and S325 , the judged results are all “no”, then step S328 can be directly performed, that is, the operating system of the computer system 100 cannot return to the normal use state through the original data in the storage device 140 .

It can be known from the above several embodiments that the present invention provides a data protection method. By applying the above embodiments, a method for managing access rights of a storage device can be extended, as shown in FIGS. 4A and 4B . The flow of this management method can also refer to FIG. 2A , FIG. 2B , FIG. 3A and FIG. 3B in the foregoing embodiments, so details are not repeated here. In addition, the management method provided in this embodiment can be applied to manage a computer system 500 with multiple storage devices, as shown in FIG. 5 . Please refer to FIG. 4 and FIG. 5 together. In the computer system 500 provided in this embodiment, a plurality of storage devices 510_1 , 510_2 , . . .

Suppose, computer system 500 has the protection method shown in above-mentioned Fig. 2A and Fig. 2B or Fig. 3A and Fig. 3B, and a user A starts above-mentioned protection method when using computer system 500, and user A starts saving The device 510_1 operates the computer system 500.

When the computer system 500 is shut down or its operating system is in an abnormal use state (i.e. hibernation state, power saving state or user logout state), the default area of the storage device 510_1 can be corresponding to the data protection process of 2A or FIG. 3A The segment data is backed up to the default external storage device A, and after the data backup is completed, a special data template is written into the default segment of the storage device 510_1 to protect the data in the storage device 510_1.

However, when the user B uses the computer system 500, the storage device 510_1 is used to boot the computer system 500 or restore the operating system of the computer system 500 to a normal use state. When the computer system 500 enters the boot process or the operating system of the computer system 500 is restarted, it may be found that the default external storage device is not connected to the computer system 500, and the computer system 500 will not be able to access the default area of the storage device 510_1. The original data of the segment completes the action of booting or restores its operating system to the normal use state.

In addition, if the user B has previously connected a preset external storage device B to the computer system 500 when using the computer system 500, and then starts the computer system 500 or restores the operating system of the computer system 500 to a normal use state. Although the computer system 500 will find that the preset external storage device B is connected to the computer system 500, since the default external storage device B does not store the original data of the preset segment of the device 510_1, the computer system 500 still cannot complete the process. Booting or the operating system of the computer system 500 still cannot return to the normal use state.

In addition, since the storage devices 510_2-510_n are not restricted by data protection, user B can select the data stored in one of the storage devices 510_2-510_n to start the computer system 500 or restore the operating system of the computer system 500 into normal use. Although user B can use the computer system 500 normally, user B still cannot use the storage device 510_1 because the data of the storage device 510_1 has been protected.

When the user B selects the storage device 510_2 to access data, and after the data access is completed, the above protection method is similarly activated. Therefore, when the computer system 500 is shut down or the operating system of the computer system 500 is not in normal use, the computer system 500 can also correspond to the data protection process of 2A or 3A, and backup the data of the preset section of the storage device 510_2 to The external storage device B is preset, and after the data backup is completed, a special template data is written into the preset section of the storage device 510_2 to protect the data in the storage device 510_2.

Afterwards, when user A uses the computer system 500 again, user A can use the default external storage device A to allow the computer system 500 to complete the boot process or allow the operating system of the computer system 500 to return to the normal use state, wherein the default The external storage device A stores data of preset sections in the storage device 510_1 of the computer system 500 .

After the computer system 500 is turned on or the operating system of the computer system 500 returns to the normal use state, the user A can use the hard disk 510_1 for data access, and can also use the storage devices 510_3-510_n. However, since the data in the storage device 510_2 has been protected, the user A still cannot use the storage device 510_2. Therefore, before the protected storage device restores the original data, the user cannot perform data access actions on the above-mentioned storage device, so as to achieve the effect of data protection.

To sum up, the present invention backs up the data of a preset section in the storage device by defaulting the external storage device. After that, write a special data template into the above-mentioned preset section to cover the original data in the preset section to complete the function of data protection. In addition, before the data in the preset area of the storage device has returned to the original data, when the computer system is used to read the data from the storage device, since the data in the above-mentioned preset section is still a special data template, the computer will The system cannot perform normal access to the data in the above section. Therefore, the present invention can effectively protect the data in the storage device.

Although the present invention has been disclosed above with preferred embodiments, it is not intended to limit the present invention. Various changes and modifications can be made by those skilled in the art without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention shall be determined by the claims of the present invention.

Claims (16)

1. A data protection method, applicable to a computer system, the above-mentioned computer system comprising a storage device, characterized in that the above-mentioned data protection method comprises the following steps: When the computer system performs a shutdown process, check whether a default external storage device is connected to the computer system; and When the above-mentioned default external storage device is connected to the above-mentioned computer system when the above-mentioned computer system performs the above-mentioned shutdown procedure, the data of a preset section in the above-mentioned storage device is backed up to the above-mentioned default external storage device, and a backup data is generated , and then write a special data template into the preset section to cover the original data in the preset section. 2. The data protection method according to claim 1, further comprising the following steps: When the above-mentioned computer system is turned on, check whether the data in the above-mentioned preset section is the above-mentioned special data template; When the inspection finds that the data in the above-mentioned preset section is the above-mentioned special data template, then check whether the above-mentioned preset external storage device is connected to the above-mentioned computer system; When the above-mentioned preset external storage device is powered on in the above-mentioned computer system, and the data in the above-mentioned preset section is the above-mentioned special data template and connected to the above-mentioned computer system, then check whether there is the above-mentioned backup data in the above-mentioned preset external storage device; and When the check finds that the backup data exists in the preset external storage device, the backup data is written back into the preset section. 3. The data protection method according to claim 1, wherein the preset external storage device is a non-volatile storage device. 4. The data protection method according to claim 1, wherein the preset external storage device is connected to the computer system through a connection interface. 5. The data protection method according to claim 1, wherein the preset section is a main boot section. 6. A data protection method, applicable to a computer system, said computer system comprising a storage device, characterized in that said protection method comprises the following steps: When the operating system of the computer system is in an abnormal state, check whether a default external storage device is connected to the computer system; and When the above-mentioned default external storage device is connected to the above-mentioned computer system when the above-mentioned operating system is in the above-mentioned abnormal use state, the data of a preset section in the above-mentioned storage device is backed up to the above-mentioned default external storage device, and a backup data, and then write a special data template into the preset section to cover the original data in the preset section. 7. The data protection method according to claim 6, further comprising the following steps: When the above-mentioned operating system is restarted, check whether the data in the above-mentioned default section is the above-mentioned special data template; When the inspection finds that the data in the above-mentioned preset section is the above-mentioned special data template, then check whether the above-mentioned preset external storage device is connected to the above-mentioned computer system; When the above-mentioned default external storage device is restarted in the above-mentioned operating system, and the data in the above-mentioned default section is the above-mentioned special data template, it is connected to the above-mentioned computer system, then check whether there is the above-mentioned backup data in the above-mentioned default external storage device; as well as When the check finds that there is the backup data in the preset external storage device, the backup data is written back into the preset section, so as to restore the original data in the preset section. 8. The data protection method according to claim 6, wherein the abnormal use state includes a sleep state, a power saving state, or a user logout state. 9. The data protection method according to claim 6, wherein the preset external storage device is a non-volatile storage device. 10. The data protection method according to claim 6, wherein the preset external storage device is coupled to the computer system through a connection interface. 11. The data protection method according to claim 6, wherein the preset section is a main boot section. 12. A management method for storage device access rights, suitable for managing computer systems with multiple storage devices, characterized in that the management method includes the following steps: When the computer system is performing a shutdown process and the operating system of the computer system is in an abnormal state, checking whether a default external storage device is connected to the computer system; and When the inspection finds that the above-mentioned default external storage device has been connected to the above-mentioned computer system, then select at least one of the above-mentioned storage devices in a preset section to back up the data in the above-mentioned default external storage device, and generate a backup Data, and then write a special data template into the above-mentioned preset section to cover the original data in the above-mentioned preset section, so that the data in the selected storage device cannot be accessed normally. 13. The management method according to claim 12, further comprising the following steps: When the above-mentioned computer system is turned on or the above-mentioned operating system is restarted, check whether the data in the above-mentioned preset section is the above-mentioned special data template; When the inspection finds that the data in the above-mentioned preset section is the above-mentioned special data template, then check whether the above-mentioned preset external storage device is connected to the above-mentioned computer system; When the above-mentioned preset external storage device is powered on in the above-mentioned computer system, and the data in the above-mentioned preset section is the above-mentioned special data template and connected to the above-mentioned computer system, then check whether there is the above-mentioned backup data in the above-mentioned preset external storage device; and When the inspection finds that the above-mentioned backup data exists in the preset external storage device, the above-mentioned backup data is written back to the above-mentioned preset section of the storage device selected for protection, so that the storage device selected for protection can be accessed normally . 14. The management method according to claim 12, wherein the step of selecting a storage device selects at least one of the storage devices for protection according to a state of a preset flag. 15. The management method according to claim 12, wherein the abnormal use status includes a sleep status, a power saving status, or a user logout status. 16. The management method according to claim 12, wherein the preset section is a main boot section.

Images