CN209803799U - Mobile data storage terminal based on quantum key encryption - Google Patents

Abstract

The utility model discloses a remove data storage terminal based on quantum key is encrypted, including master controller module, interface module, memory, encryption and decryption module and power module, its characterized in that: the electronic device further comprises a quantum key generation module, wherein the quantum key generation module is electrically connected to the master controller module and the memory and is used for generating a quantum key, and the encryption and decryption module is used for carrying out encryption and decryption operations on a single file or all files in the folder based on the quantum key. The utility model discloses a remove data memory uses the quantum key that has the real randomness of quantum to encrypt, can prevent effectively that the computer that has superstrong computing power from deciphering, has higher grade data encryption security.

Description

mobile data storage terminal based on quantum key encryption

Technical Field

The utility model belongs to the technical field of remove storage device, concretely relates to remove data storage terminal based on quantum key encrypts

Background

With the increasing wide application of the internet, the popularization of various digital consumer electronics products and the continuous development of mobile concepts in various fields from business offices to personal entertainment and leisure, the storage demand of personal data, especially the increase speed of the demand of mobile storage, becomes faster and faster. In the face of the current social situation that information is continuously leaked and secrets are continuously stolen, users need safer mobile storage media. Especially in the important departments of the party, the government, the military, the enterprise, etc., the secure storage of data is especially important.

The existing encrypted mobile hard disk is mostly based on a classical encryption system such as an asymmetric encryption algorithm RSA except for basic hardware protection, however, the encryption algorithms rely on the complexity of factorization of large integer prime factors to provide security. With the advent of quantum computers, the classic encryption system is more and more insecure; in addition, the current mobile hard disk on the market belongs to an independent storage device, and once the hard disk is not well stored, lost or stolen, even if the other party cannot decipher the data, the data loss is still painful.

Disclosure of Invention

The to-be-solved technical problem of the utility model is to provide a can prevent effectively that the removal data storage terminal based on quantum key encryption that is deciphered by the computer that has superstrong computing power.

In order to solve the technical problem, the utility model provides a mobile data storage terminal based on quantum key is encrypted, including master controller module, interface module, memory, encryption and decryption module and power module, it still includes quantum key generation module, quantum key generation module electricity is connected to master controller module and memory for generate the quantum key, encryption and decryption module carries out the encryption and decryption operation to single file or all files under the file folder based on this quantum key.

In a preferred embodiment of the present invention, further comprising a quantum key generated by the quantum key generation module, a part of the quantum key is used as a seed key to encrypt the remaining quantum key, and the quantum key encrypted by the seed key is stored in the key storage unit of the memory.

The utility model discloses a preferred embodiment, further include it still includes the orientation module, orientation module electric connection is to master module, and it is used for fixing a position local present position information.

In a preferred embodiment of the present invention, the positioning module is a GPS positioning module.

The utility model discloses a preferred embodiment, further include it still includes GPRS/GSM module, GPRS/GSM module electricity is connected to the master module, and it is used for receiving external terminal equipment's state instruction, the master module basis the state instruction carries out the storage operation.

The utility model discloses a preferred embodiment, further include it still includes built-in power supply module, built-in power supply module electricity is connected to the master module, and it is used for independently supplying power when storage terminal does not connect external equipment, maintain the power consumption demand of user to storage terminal's remote management, control and location.

The present invention further provides a preferred embodiment, wherein the encryption/decryption module supports, but is not limited to, AES encryption algorithm, DES encryption algorithm, SM2 encryption algorithm, and SM4 encryption algorithm.

the utility model discloses a preferred embodiment, further include the memory configuration includes file storage module and key storage module, file storage module and key storage module are used for the cryptograph information after the storage encryption and the quantum key after the encryption respectively.

in a preferred embodiment of the present invention, the interface module further comprises a USB interface and an RJ45 interface.

the utility model has the advantages that:

The utility model discloses a mobile data storage uses the quantum key that has the real randomness of quantum to encrypt, can prevent effectively that the computer that has superstrong computing power from deciphering, has higher level's data encryption security, and it has following technical advantage:

1. The data memory is internally provided with the quantum key generation module, so that a quantum key can be generated at any time to supply key requirements for encryption and decryption of files, the quantum key does not need to be transmitted through a quantum trunk line and a wireless distribution mode, and the use requirements for encryption and decryption of data in a larger scale can be supported.

2. A symmetric encryption algorithm is adopted instead of an asymmetric key because the public key and the private key of the asymmetric key are fixed and unchanged, the security depends on the complexity of mathematics, and the risk of key leakage or algorithm decoding exists. The built-in quantum key generation module can continuously generate quantum keys, a one-time pad encryption and decryption mode is realized, the technical problems of the asymmetric keys are effectively solved, and the high-level data encryption security is achieved.

Drawings

FIG. 1 is a block diagram of a mobile data storage device according to a preferred embodiment of the present invention;

FIG. 2 is a flow chart of storing data and reading data of the mobile data storage shown in FIG. 1.

Detailed Description

The present invention is further described with reference to the following drawings and specific embodiments so that those skilled in the art can better understand the present invention and can implement the present invention, but the embodiments are not to be construed as limiting the present invention.

Examples

Referring to fig. 1, the present embodiment discloses a mobile data storage terminal based on quantum key encryption, which includes a master controller module, an interface module, a memory, a built-in quantum key generation module, an encryption/decryption module, a positioning module, a GPRS/GSM module, a power supply module, and a built-in power supply module. The following describes the structure and function of each part:

1. interface module

The interface module is connected with a mobile data storage terminal (hereinafter referred to as a local machine) and an external terminal or a data host machine in a wired connection mode in a connected state, so that data communication between the local machine and the external terminal or the data host machine is realized; the interface module is also connected with a peripheral charging device in a wired connection mode to charge the power supply module. The interface module can be configured as a universal USB interface, a serial data interface or a parallel data interface according to requirements, such as a USB3.0 interface, an RJ45 interface RS-485 interface or an RS-422 interface; according to the use requirement of the user, a special data interface customized by the user can be configured.

2. Power supply module

The power supply module supplies power to each load of the local machine when the local machine runs. The power supply module can be configured as a storage battery and is connected with the peripheral charging equipment through the interface module for charging.

3. Built-in power supply module

the built-in power supply module is used for supplying power autonomously, and when the local machine is not connected with external equipment, the energy consumption requirements of a user on remote management, monitoring and positioning of the storage terminal are maintained. The built-in power supply module can be configured as a storage battery and is connected with the peripheral charging equipment through the interface module for charging.

4. memory device

The memory may be configured as a FLASH memory array, RAM, FIFO, or in the form of a memory bank, TF card, preferably as a FLASH memory array. The system comprises a file storage module and a key storage module, wherein the key storage module is used for storing the encrypted quantum key, and the file storage module is used for storing the data encrypted by using the quantum key.

5. Quantum key generation module

The quantum key for encrypting the source data is generated by a quantum key generation module which is built in the quantum key generation module, the quantum key generation module can be configured as a quantum true random number generator chip, the quantum key generated by the quantum true random number generator chip is a key with true randomness, and the unconditional security of the data can be ensured by encrypting the data through the true random key. In order to improve the security of the quantum key in the storage stage after the quantum key is generated, part of the quantum keys generated by the quantum true random number generator chip are selected as seed keys to encrypt the rest of the quantum keys, and the encrypted quantum keys are stored in a key storage module for later use (or standby use). The encryption and decryption of the quantum key support, but are not limited to, an AES encryption algorithm, a DES encryption algorithm, an SM2 encryption algorithm, and an SM4 encryption algorithm.

6. Encryption and decryption module

The encryption and decryption module is used for implementing decryption behaviors including encryption and decryption of the quantum key and encryption and decryption of source data, and the encrypted data includes encryption and decryption operations on a single file or all files in a folder. The encryption and decryption module supports, but is not limited to, an AES encryption algorithm, a DES encryption algorithm, an SM2 encryption algorithm, and an SM4 encryption algorithm.

7. positioning module

The positioning module is used for positioning the current position information of the mobile phone, and can be configured as a GPS positioning module which is mature at present. The user can conveniently locate the position of the local machine under the condition that the local machine is lost or stolen, and a basis is provided for subsequently retrieving the local machine.

8. GPRS/GSM module

And the GPRS/GSM module is used for receiving a state instruction of external terminal equipment and ensuring that the state of the local machine is within the user control range.

9. Master controller module

The main controller module is provided with an FPGA chip, takes the FPGA chip as a control core, is configured into a built-in programmable micro data processor of the main controller, and executes a preset data processing program:

The FPGA chip is provided with a radio frequency signal receiving end and is used for receiving local position information sent by the positioning module;

The FPGA chip is provided with a communication interface end and is used for being connected with the interface module for communication;

The FPGA chip is provided with a communication interface end and is used for connecting and communicating with the GPRS/GSM module;

The FPGA chip is provided with a control interface end and is used for controlling and connecting the quantum key generation module and triggering the quantum key generation module to generate a quantum key;

The FPGA chip is provided with a control interface end for controlling and connecting the encryption and decryption module;

The FPGA chip is provided with a data interface end and is used for communicating with the memory;

The FPGA chip is provided with a power interface and is used for being electrically connected with the power module and receiving the power supply of the power module.

The present embodiment needs to be supplemented with: the machine is composed of a main controller module with an FPGA chip, an interface module, a memory, a built-in quantum key generation module, an encryption and decryption module, a positioning module, a GPRS/GSM module, a power supply module, a built-in power supply module and other specific hardware structures, wherein part of hardware participates in a software program in the running process, and the software programs assisting the machine to run are all existing reproducible software programs and do not form an innovation point of the application.

As shown in fig. 2, the mobile data storage terminal designed above, when used for storing data:

(1) The user passes through interface module and connects external terminal equipment (for example, computer or cell-phone terminal), independently installs application, gets into this application through APP and carries out the first time and use equipment activation, accomplishes account registration and cell-phone number and binds. And triggering the quantum key generation module to generate a quantum key when the application program is activated, using part of the quantum key as a seed key to encrypt the rest quantum key, and obtaining the encrypted quantum key to store in the key storage module for calling at any time.

(2) The user imports the data to be stored and starts the encryption command. Files needing to be stored can be directly dragged to the local computer through a computer, or the files can be uploaded to the local computer through a mobile phone APP.

(3) the main controller module receives an encryption instruction of a user, calls a quantum key of the key storage module to perform decryption processing, triggers the encryption and decryption module to symmetrically encrypt data imported by the user by using the quantum key after decryption processing, and stores the encrypted data into the file storage module. When the file is selected, the encryption operation can be performed on a single file or a single folder; or the folder and all files under the folder can be encrypted. Here, when the encryption/decryption module performs an encryption operation on a plurality of files, the setting of the thread number can be increased, and the encryption/decryption speed is increased as the setting of the thread number is increased. When the quantum key amount of the key storage module is lower than a set threshold value, a request is sent to the main controller module, the main controller module sends an instruction to the quantum key generation module to generate a quantum key, and the quantum key is encrypted and stored in the key storage module.

(4) And the encrypted data is stored in a mode of covering the original data.

When used for reading data:

The application program can be opened by the computer terminal or the mobile phone terminal for reading the data, and the file can be read after the password is input.

S1) if the user only checks the file and does not need to change the file to save the file again, the original file is not covered by default, and the original key is still unchanged after the file is normally closed. If the user wants to modify the file, a new key needs to be input for encryption during storage, and the original file is covered for storage.

S2) if the user tries to read the file through other unauthenticated users, a short message is sent to the user' S mobile phone to request whether the file is allowed to be viewed. And if the user agrees to check, sending the dynamic verification code to the unauthenticated user, wherein the unauthenticated user accesses the hard disk through the dynamic verification code and the authority of the unauthenticated user is in a read-only mode.

s3), if the hard disk is lost, the user can carry out positioning search to retrieve by moving a GPS module arranged in the hard disk.

The above-mentioned embodiments are merely preferred embodiments for fully illustrating the present invention, and the scope of the present invention is not limited thereto. Equivalent substitutes or changes made by the technical personnel in the technical field on the basis of the utility model are all within the protection scope of the utility model. The protection scope of the present invention is subject to the claims.

Claims (9)

1. The utility model provides a mobile data storage terminal based on quantum key encryption, includes master controller module, interface module, memory, encryption and decryption module and power module, its characterized in that: the electronic device further comprises a quantum key generation module, wherein the quantum key generation module is electrically connected to the master controller module and the memory and is used for generating a quantum key, and the encryption and decryption module is used for carrying out encryption and decryption operations on a single file or all files in the folder based on the quantum key.

2. The mobile data storage terminal based on quantum key encryption of claim 1, wherein: in the quantum keys generated by the quantum key generation module, part of the quantum keys are used as seed keys to encrypt the rest of the quantum keys, and the quantum keys encrypted by the seed keys are stored in a key storage unit of the memory.

3. The mobile data storage terminal based on quantum key encryption of claim 1, wherein: the positioning module is electrically connected to the main controller module and used for positioning the current position information of the machine.

4. The mobile data storage terminal based on quantum key encryption of claim 3, wherein: the positioning module is a GPS positioning module.

5. The mobile data storage terminal based on quantum key encryption of claim 1, wherein: the terminal equipment further comprises a GPRS/GSM module, wherein the GPRS/GSM module is electrically connected to the master controller module and used for receiving state instructions of external terminal equipment, and the master controller module executes storage operation according to the state instructions.

6. the mobile data storage terminal based on quantum key encryption of claim 1, wherein: the power consumption monitoring system further comprises a built-in power supply module which is electrically connected to the main controller module and used for supplying power autonomously, and when the storage terminal is not connected with external equipment, the power consumption requirements of a user on remote management, monitoring and positioning of the storage terminal are maintained.

7. The mobile data storage terminal based on quantum key encryption of claim 1, wherein: the encryption and decryption module supports, but is not limited to, an AES encryption algorithm, a DES encryption algorithm, an SM2 encryption algorithm, and an SM4 encryption algorithm.

8. the mobile data storage terminal based on quantum key encryption of claim 1, wherein: the memory configuration comprises a file storage module and a key storage module, wherein the file storage module and the key storage module are respectively used for storing encrypted ciphertext information and an encrypted quantum key.

9. The mobile data storage terminal based on quantum key encryption of claim 8, wherein: the interface module comprises a USB interface and an RJ45 interface.