50results about "Internal/peripheral component protection" patented technology

The invention provides a security data storage method and system, which are applicable to processors supporting ARM TrustZone technology, and use an eMMC (Embeded Multi Media Card) supporting an RPMB (Replay Protected Memory Block) partition as a storage medium. The method comprises the following steps that trusted application programs, secure storage service programs and produced security data objects are protected by a trusted execution environment; the secure storage service programs provide set and access of the security data objects for the trusted application programs, and call an encryption and decryption module to encrypt and decrypt the security data objects; the encrypted security data objects are shared with eMMC RPMB drive programs in a non-trusted execution environment through a shared memory page; the eMMC RPMB drive programs in the non-trusted execution environment complete access and storage on the eMMC RPMB partition. According to the security data storage method and the system, the security data objects can be enabled to be stored reliably.

A SoC may be utilized to authenticate access to one or more secure functions. A password may be generated within the SoC which is unique to each SoC instance and unique to each iteration of authentication. The SoC may challenge external entities attempting access to provide a matching password. A random number sample may be generated within the SoC and stored. A chip ID, secret word and a table of keys with key indices are also stored in memory. Two or more of the stored items may be passed to a hash function to generate the password. The external entity may generate and return the password utilizing information communicated from the SoC during each authentication operation as well as information known a priori. The SoC may compare the returned password with the internally generated password and may grant access to the secure functions.

In a computer system supporting execution of virtualization software and at least one instance of virtual system hardware, an interface is provided into the virtualization software to allow a program to directly define the access characteristics of its program data stored in physical memory. The technique includes providing data identifying memory pages and their access characteristics to the virtualization software which then derives the memory access characteristics from the specified data. Optionally, the program may also specify a pre-defined function to be performed upon the occurrence of a fault associated with access to an identified memory page. In this manner, programs operating both internal and external to the virtualization software can protect his memory pages, without intermediation by the operating system software.

To secure the confidentiality of data stored in data storage devices, a position determination system is mechanically coupled to the data storage devices and continuously determines a position thereof. A processor, provided with an authorized location for the data storage devices, facilitates transfer of data to and from the data storage devices. Specifically, when the position of the data storage devices matches the authorized location, the processor facilitates transfer of data from the data storage devices without any modification of the data. However, when the position of the data storage means does not match the authorized location, the processor inflates the data by dispersing it in a very large set of irrelevant data.

This invention discloses one data transparent protection safety write system and method, which comprises hardware platform, virtual monitor and at least one operation system, wherein, the platform comprises memory device composed of data preservation area to store each data protection point MBR and file align list and status list; the virtual monitor comprises data protection module to set protection points and to store the MBR and list and point status into the preservation area for change operation on the protection point; capture operation system and the program in it visit memory device I/O operation order and directing the orders into accurate position on the memory device.

Devices, methods and products are described that provide removable storage device data protection. One aspect provides a method comprising: ascertaining a protected removable storage device connected to an information handling device, said protected removable storage device having a first partition for storing data according to a first file system type, and a second partition for storing user data according to a second file system type; and responsive to said information handling device recognizing said second file system type, querying for user credentials to decrypt a data encryption key used to encrypt said user data of said second partition. Other embodiments are described.

The invention provides an encryption method, a decryption method, and a corresponding device and a system. The encryption method comprises: a encryption client sending a key application request message to a key management system so as to make the key management system generate an encryption key according to the key application request message; the encryption client receiving a key application response message sent by the key management system, the key application response message including the encryption key; and the encryption client encrypting a system volume of a virtual machine according to the encryption key.

An electronic device is provided. The electronic device includes a first memory unit for storing a non-payment application, a first processor, a fingerprint sensing unit and a security element including a second memory unit and a second processor. The second memory unit stores a payment application and user fingerprint information. When the second processor executes the payment application, the fingerprint sensing unit captures a fingerprint image of a user's finger and the second processor transmits the fingerprint image to the first processor via a secure channel. The first processor calculates biometric characteristics of the fingerprint image to generate to-be-recognized fingerprint information which is transmitted to the second processor via the secure channel. When the second processor determines that the to-be-recognized fingerprint information matches the user fingerprint information, the second processor generates an authentication signal for a payment transaction.

An authentication method and an electronic device, the method including receiving a touch operation on an icon of a first application, collecting a biological feature of a user in response to the touch operation, comparing the collected biological feature with a biological feature bound to the first application, where the first application is bound to at least one biological feature, each biological feature is bound to a user account of the first application, each user account is corresponding to a resource directory, when the comparison result indicates that the collected biological feature matches a first biological feature of the at least one biological feature, determining a first user account bound to the first biological feature, and logging in to the first application based on the first user account, and loading information stored in a first resource directory corresponding to the first user account.

The invention discloses a method for acquiring a unique identifier of Android equipment, and relates to a computer technology. When the equipment unique identifier is acquired, firstly, a plurality ofpieces of key information of the Android system are acquired in an app; then according to the key information, the equipment unique identifier is constructed; the generated equipment unique identifier is stored to a plurality of positions; and finally, when the equipment unique identifier is acquired, firstly, the equipment unique identifier is acquired from storage, and if the equipment unique identifier cannot be acquired, the equipment unique identifier is regenerated. According to the invention, the equipment identifier is generated on the basis of the key information of the Android system, such as an IMEI, a Serial Number and an Android Id, so that uniqueness of the equipment identifier is ensured, and the risk of exposing information of the user equipment is avoided; and the equipment unique identifier is stored to a plurality of positions, so as to prevent a case of completely clearing up the unique identifier when the app is subjected to information clearing or unloading reinstallation and ensure stability of the unique identifier.

This invention discloses an encryption keyboard with dynamic display including the keyboard body linking the external device with many numbers and function keys, in which, the key value display driver circuit linking with CPU and processing dynamic definition and identification on the number keys is set. The number keys are set with display units to dynamically display number key values respectively, and the units connect the keys display driver circuits. The CPU is a SCM, and the driver circuit includes data flip-latch and display encoder. The invention uses the light digital tube to make every bit show a figure, and show different one after each restoration, thus effectively preventing stealing passwords by guessing from button positions.

The invention discloses an information display method and device, and is used for improve the safety of user information. The information display method includes the following steps: monitoring a distance between a terminal itself and a designated device; determining if the monitored distance is less than a preset distance or not; and displaying information if the monitored distance is less than a preset distance that means that a relevant operation needs to be done currently, and otherwise, it means that the relevant operation does not need to be done currently, and the information is not displayed. In this way, the terminal displays the information when the relevant operation needs to be done, and does not display the information when the relevant operation does not need to be done, and thereby effectively improving the safety of the user information.

The invention provides a method for restoring encrypted information in an encryption card. Based on a backup mechanism, the method ensures that in an environment of a plurality of administrators, when one administrator updates a protection key in a card, the function that other administrators without updated protection keys still can descript sensitive data, start the service function of the encryption card and guarantee that the normal work of the encryption card is realized.

The invention relates to a data protection method and device, a solid state disk and a storage medium. The method comprises the following steps: before writing plaintext data into a host memory buffer(HMB), encrypting the plaintext data according to a preset encryption mode to obtain ciphertext data, and writing the ciphertext data into the HMB. The plaintext data can be encrypted in the solid state disk, the encrypted ciphertext data is written into the HMB, and only the ciphertext data exists in the HMB, so that even if the ciphertext data on the HMB is stolen, the ciphertext data cannot bedecrypted to obtain correct plaintext data, and the security of the plaintext data is ensured.

The invention provides a display control method, a terminal and a computer readable storage medium, aiming at solving the defect that users themselves cannot continue to normally view and operate a terminal when the existing terminal turns off a screen to prevent displayed information from being viewed by other people. The method includes the following steps: when the terminal currently displays the information, determining whether the terminal is in a dangerous display state, wherein the dangerous display state is a state that the currently displayed information can be peeped; if yes, determining a corresponding bending parameter that the terminal switches from the dangerous display state to a secure display state, wherein the secure display state is a state that the currently displayed information cannot be peeped; and controlling the terminal to bend according to the bending parameter. By implementing the above scheme, the anti-peeping of the currently displayed information of the terminal can be realized, the requirements that the users can continue to operate the terminal after carrying out anti-peeping processing can be satisfied, and the user experience can be improved.

There is disclosed an image processing apparatus adapted to selectively set a feature of securing the confidentiality of the real data indicated by allocation data by attaching an enabler to the apparatus when the video data left in a storage device are unnecessary. The image processing apparatus 100 stores in a memory 11 in advance an erasing program for erasing used video data in an HDD 19. After executing an image forming process, using the video data of the HDD 19 and if it is detected that an enabler 1 is inserted into the USB interface 20 to lift the restriction (prohibition?) of the use of the erasing program, a CPU 10 deletes the allocation data for the unnecessary data and starts the erasing program to overwrite/erase the corresponding real data to secure the confidentiality of the real data. If otherwise, however, the CPU 10 does not overwrite/erase the real data.

The embodiment of the invention discloses an information display method and a related product, which are applied to electronic equipment, and the method comprises the following steps: collecting a target parameter of a target object, and comparing the target parameter with a template corresponding to the target parameter to obtain a comparison result; determining a main display screen and an auxiliary display screen from the front transparent display screen and the back transparent display screen according to the comparison result; and obtaining to-be-displayed content, displaying the to-be-displayed content on the main display screen, and controlling the auxiliary display screen to display according to a set strategy. The technical scheme provided by the invention has the advantages thatthe optical fingerprint identification precision is improved, and the user experience is improved.

A method and apparatus is provided for managing private data, such as a phone book, in a multi-function product (MFP) used by multiple users. The method involves receiving user information and performing user authentication, and reading data stored in a user area allocated to the authenticated user in a storage unit divided into a number of user areas. Accordingly, when private data is managed in an MFP used by multiple users, by dividing a storage unit in which data is stored into a number of user areas, allocating the divided user areas to users, and allowing a user to access only a user area allocated to the user through an authentication process, the private data can be fully prevented from being accessed by other users, and it will be unlikely for a user to be confused because of other user data.

The invention discloses a computer information leakage prevention device and a use method. The computer information leakage prevention device comprises a base and a computer screen mounted at the topof the base, a partition plate is arranged on one side of the computer screen; a mounting groove matched with the partition plate is formed in one side of the top of the base; the bottom of the partition plate extends into the mounting groove and is movably connected with the mounting groove; a threaded groove is formed in one side of the top of the base, a screw is installed in the threaded groove in a threaded mode and located on the side, away from the computer screen, of the partition plate, the same rectangular groove is formed in the inner wall of the bottom side of the installation groove and the inner wall of the bottom side of the threaded groove, and a first groove is formed in the bottom of the side, away from the screw, of the partition plate. The computer information leakage prevention device is reasonable in design, effectively prevents a peeper from peeping contents on the computer screen, can give an alarm to remind a user when the peeper disassembles the partition plate, and effectively guarantees the information safety on the computer screen.

The invention discloses a method, system and device for enhancing security of storage media and a medium, and relates to the field of data security; the method includes determining the number A of participating users, and wherein each participating user generates a corresponding key; deploying a multi-signature smart contract, obtaining a secure private key string corresponding to the private key of each participating user under the multi-signature smart contract, and signing each secure private key string to obtain a key set; sending the key set to a storage medium, and encrypting according to a multi-threshold encryption method to obtain encrypted data; according to the multi-signature smart contract, obtaining a decryption private key string corresponding to a private key of a decryption user, and signing each decryption private key string according to the multi-signature smart contract to obtain solution densification; sending the solution density to a storage medium to obtain decrypted data; and comparing the decrypted data with the encrypted data to judge whether decryption succeeds or not. According to the invention, the problem that the keys are difficult to manage due to too many keys in a large-scale network environment can be effectively solved.

The invention discloses a server uncovering detection method and system; the method comprises the steps: whether uncovering is safe or not is determined when a substrate management controller detects the triggering of an uncovering signal; when it is judged that the cover is opened safely, the complex programmable logic device controls the power supply chip to output normal working voltage to the hard disk; and when it is judged that uncovering is not safe, the complex programmable logic device switches a power supply circuit of the power supply chip and outputs self-destruction voltage to the hard disk, and the hard disk triggers self-destruction. The system comprises a substrate management controller, a safety key, a complex programmable logic device, a power supply chip and a hard disk. According to the invention, the risk of data leakage of the server can be reduced, the security protection of the server is realized, the risk of secret-related data leakage caused by attacking or prizing up the server is reduced, the rapid data protection of the server is increased, and the permanent protection of the data of the server is ensured.

The invention relates to a display method and apparatus, and an electronic device. The method is applied to the electronic device. A parallax barrier layer is arranged in front of a display component of the electronic device. The method comprises the steps of determining a display mode of the electronic device; when in a predefined private display mode, enabling the parallax barrier layer to form a parallax barrier located in a preset region; and, adjusting a content display mode of the display component to enable display contents in the preset region to be located in a visible region, corresponding to the parallax barrier, on the display component. Through the technical scheme, the content visible range of the electronic device can be controlled, so that the privacy of the electronic device is improved.

The invention discloses a method, a device and equipment for generating a password input keyboard, and a storage medium, and relates to the technical field of mobile terminals. The method comprises the steps that when a double-screen mobile terminal detects that a user inputs a password, combined keyboard interfaces are generated on a first screen and a second screen of the double-screen mobile terminal respectively; and the double-screen mobile terminal edits the key information on the combined keyboard interface of the first screen to generate a first effective key of the first screen and asecond effective key of the second screen.

A method of verifying the atomicity of an operation of data update in an EEPROM, includes, during a data writing operation of writing the data, the steps of: initializing at least one first flag to a first value and storing this value in the EEPROM; erasing the data from the EEPROM; writing a value of the data into the EEPROM; and writing at least one second value of the first flag into the EEPROM.