APPARATUS AND METHOD FOR ENCRYPTING HARD DISK

• US 20130103953A1
• Filed: 12/14/2011
• Published: 04/25/2013
• Est. Priority Date: 10/24/2011
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: YOON, E-Joong, HAN, Jae-Woo, LIM, Jeong-Seok, KIM, Choon-Soo, YANG, Kwang-Mo, KIM, Hyo-Won, KIM, Soo-Hyeon, KOO, Bon-Seok, PARK, Jung-Hyung
• Application Number:
  US13/325,915
• Publication Number:
  US 20130103953A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

An apparatus and method for encrypting a hard disk are provided. The apparatus includes a program management unit, an Internet Protocol (IP) management unit, and an encryption processing unit. The program management unit causes an allowed program or process to be executed based on a result of determination as to whether the program or process to be executed in a host terminal is allowed to gain access. The IP management unit causes data to be transmitted to an allowed destination IP address based on a result of determination as to whether the destination IP address to which the host terminal attempts to transmit the data is allowed to be accessed. The encryption processing unit encrypts and decrypts all data, exchanged between the host terminal and the hard disk by applying an algorithm, selected by a user, to the data.

Claims

1. An apparatus for encrypting a hard disk, comprising:

a program management unit for causing an allowed program and process to be executed based on a result of determination as to whether the program and process to be executed in a host terminal is allowed to gain access;

an Internet Protocol (IP) management unit for causing data to be transmitted to an allowed destination IP address based on a result of determination as to whether the destination IP address to which the host terminal attempts to transmit the data is allowed to be accessed; and

an encryption processing unit for encrypting and decrypting all data, exchanged between the host terminal and the hard disk, by applying an algorithm, selected by a user, to the data.

2. The apparatus as set forth in claim 1, further comprising a host matching unit for operating selectively in conjunction with an interface of the hard disk *which is connected to the host terminal;

wherein the host matching unit,

when the user transfers a write command via the host terminal, transfers data, input in response to the write command, to the encryption processing unit, so that it is encrypted; and

when the user transfers a read command via the host terminal, transfers data, decrypted by the encryption processing unit, to the host terminal.

3. The apparatus as set forth in claim 2, further comprising a hard disk matching unit for operating selectively in conjunction with the interface of the hard disk which is connected to the host terminal;

the hard disk matching unit;

when the user transfers the write command via the host terminal, transferring the data, input in response to the write command and encrypted by the encryption processing unit, to the hard disk; and

when the user transfers the read command via the host terminal, receiving encrypted data stored in the hand disk and transferring the received encrypted data to the encryption processing unit.

4. The apparatus as set forth in claim 3, wherein the encryption processing unit, when the user transfers the write command via the host terminal, receives the data input in response to the write command and transferred via the host matching unit, and creates the encrypted data by applying the algorithm, selected by the user, to the input data.

5. The apparatus as set forth in claim 4, wherein the encryption processing unit transfers the encrypted data to the hard disk via the hard disk matching unit.

6. The apparatus as set forth in claim 3, wherein the encryption processing unit, when the user transfers the read command via the host terminal, receives the encrypted data transferred from the hard disk via the hard disk matching unit, and creates the decrypted data by applying an algorithm, selected by the user, to the encrypted data.

7. The apparatus as set forth in claim 6, wherein the encryption processing unit transfers the decrypted data to the host terminal via the host matching unit.

8. The apparatus as set forth in claim 1, wherein the program management unit:

creates access registration information, that is, information about accessible programs and processes, by checking a list of programs and processes installed in the host terminal; and

when a new program or process is to be executed in the host terminal, determines whether to allow it to be executed by determining whether the new program or process exists in the access registration information.

9. The apparatus as set forth in claim 1, wherein the IP management unit:

creates IP registration information by checking information about IP addresses which have been accessed by programs and processes installed in the host terminal; and

when the host terminal is connected to a program or process network and data is transferred to a destination IP address, determines whether to transmit the data by determining whether the destination IP address exists in the IP registration information.

10. A method of encrypting a hard disk comprising:

determining whether a user has mounted an authentication module into an authentication module connection unit;

determining whether user authentication information of the authentication module is identical to previously stored user authentication information;

if the user authentication information of the authentication module is identical to the previously stored user authentication information, causing an allowed program and process to be executed based on a result of determination as to whether the program and process to be executed in a host terminal is allowed to gain access;

causing data to be transmitted to an allowed destination IP address based on a result of determination as to whether the destination IP address to which the host terminal attempts to transmit the data is allowed to be accessed; and

encrypting and decrypting all data, exchanged between the host terminal and the hard disk, by applying an algorithm, selected by a user, to the data.

11. The method as set forth in claim 10, wherein the causing an allowed program and process to be executed comprises:

creating access registration information, that is, information about accessible programs and processes, by checking a list of programs and processes installed in the host terminal; and

when a new program or process is to be executed in the host terminal, determining whether to allow it to be executed by determining whether the new program or process/exists in the access registration information.

12. The method as set forth in claim 10, wherein the causing data to be transmitted to an allowed destination IP address comprises:

creating IP registration information by checking information about IP addresses which have been accessed by programs and processes installed in the host terminal; and

when the host terminal is connected to a program or process network and data is transferred to a destination IP address, determining whether to transmit the data by determining whether the destination IP address exists in the IP registration information.

13. The method as set forth in claim 10, wherein the encrypting and decrypting comprises:

when the user transfers a write command via the host terminal, receiving data input in response to the write command and transferred via a host matching unit;

creating encrypted data by applying the algorithm, selected by the user, to the input data; and

transferring the encrypted data to the hard disk via a hard disk matching unit.

14. The method as set forth in claim 10, wherein the encrypting and decrypting comprises:

when the user transfers a read command via the host terminal, receiving encrypted data from the hard disk via a hard disk matching unit;

creating decrypted data by applying the algorithm, selected by the user, to the encrypted data and

transferring the decrypted data to the host terminal via a host matching unit