DIGITAL INFORMATION PROTECTING METHOD AND APPARATUS, AND COMPUTER ACCESSIBLE RECORDING MEDIUM

• US 20140095892A1
• Filed: 11/04/2013
• Published: 04/03/2014
• Est. Priority Date: 03/19/2002
• Status: Active Grant

• Current Assignee: Shansun Technology Company Limited
• Original Assignee: Shansun Technology Company Limited
• Inventors: Lai, Jing-Shiun, Nain, Ling-Ying, Lin, Po-Hsu, Lin, Sheng-Kai
• Granted Patent: US 9,081,725 B2
• Time in Patent Office: Days
• US Class Current: 713/190
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 12/1441 for a range
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2107 File encryption

Abstract

In a method for protecting digital information, a processor converts a protected address range into a plurality of address blocks of a storage device based on a preset conversion unit, and generates an address block rearranging rule using the address blocks as a parameter. When it is desired to load data into a space of an address batch of the protected address range, the processor converts the address batch into a plurality of address blocks based on the conversion unit, locates rearranged addresses of the address blocks in the protected address range according to the address block rearranging rule, and loads the data into spaces of the rearranged addresses.

Claims

1. A method for protecting digital information, comprising:

converting, using a processor, a protected address range into a plurality of address blocks of a storage device based on a preset conversion unit, and generating an address block rearranging rule using the address blocks as a parameter;

when it is desired to load data into a space of an address batch of the protected address range, converting, using the processor, the address batch into a plurality of address blocks based on the conversion unit; and

locating, using the processor, rearranged addresses of the address blocks in the protected address range according to the address block rearranging rule, and loading, using the processor, the data into spaces of the rearranged addresses;

wherein, the conversion unit has a size of (n) bits, where (n) is a positive integer, and the size of the conversion unit is smaller than a size of an address that constitute the protected address range.

2. The method of claim 1, wherein the protected address range is a storage address space of the storage device, and prior to loading the data into the rearranged addresses, each of the rearranged addresses is converted into an actual write address of the storage device according to a storage unit of the storage device.

3. The method of claim 1, wherein the size of the converting unit is one of 1 byte, 4 bits and 2 bits.

4. The method of claim 1, wherein:

an irreproducible random sequence arranging scheme is used as the address block rearranging rule, and includes utilizing operation information of internal hardware of a computer to generate a random number sequence ranging from 0 to the number of the address blocks, and exchanging and i^th address block with an address block having an i^th position in the random number sequence to thereby generate an address conversion table; and

the rearranged addresses of the address blocks in the protected address range are located based on the address conversion table.

5. The method of claim 1, wherein, an address conversion key inputted externally is accepted, and the address block rearranging rule is constructed using a number of the address blocks and the address conversion key.

6. The method of claim 5, wherein, the address block rearranging rule is to use a reproducible random sequence arranging scheme which includes utilizing a computer function Rand with a seed to generate a random number sequence ranging from 0 to the number of the address blocks, and exchanging and i^th address block with an address block having an i^th position in the random number sequence to thereby generate an address conversion table.

7. The method of claim 6, wherein the rearranged addresses of the address blocks in the protected address range are located according to the address conversion table.

8. The method of claim 1, wherein the data is encrypted data that is encrypted using an encryption algorithm and an encryption code.

9. A method for protecting digital information, comprising:

dividing, using a processor, a protected address range into a plurality of first conversion batches, converting, using the processor, an address range of each of the first conversion batches into spaces of a plurality of first address blocks of a storage device based on a first conversion unit, and generating, using the processor, a first address block rearranging rule for rearranging the first address blocks using the first address blocks as a parameter;

dividing, using the processor, the protected address range into a plurality of second conversion batches,

converting, using the processor, an address range of each of the second conversion batches into spaces of a plurality of second address blocks based on a preset second conversion unit, and generating, using the processor, a second address block rearranging rule for rearranging the second address blocks using the second address blocks as a parameter;

dividing, using the processor, the protected address range into at least one third conversion batch, converting, using the processor, an address range of said at least one third conversion batch into spaces of a plurality of third address blocks based on a preset third conversion unit, and generating, using the processor, a third address block rearranging rule for rearranging the third address blocks using the third address blocks as a parameter; and

when it is desired to load data into an address batch of the protected address range, determining, using the processor, the first conversion batch to which the address batch belongs, converting, using the processor, the address batch into a plurality of address blocks based on the first conversion unit, locating rearranged addresses of the address blocks in the protected address range according to the first, second and third address block rearranging rules, and loading the data into the spaces of the rearranged addresses thus located.

10. The method of claim 9, wherein the data is encrypted data that is encrypted using an encryption algorithm and an encryption code.

11. A non-transitory computer accessible recording medium having a digital information protecting program recorded therein, the program being readable and executable to cause a computer to execute steps of a method for protecting digital information, the method comprising:

converting, using a processor, a protected address range into a space of a plurality of address blocks based on a preset conversion unit, and generating an address block rearranging rule using the address blocks as a parameter;

when it is desired to load data into an address batch of the protected address range, converting, using the processor, the address batch into a plurality of address blocks based on the conversion unit; and

locating, using the processor, rearranged addresses of the address blocks in the protected address range according to the address block rearranging rule, and loading, using the processor, the data into spaces of the rearranged addresses;

wherein, the conversion unit has a size of (n) bits, where (n) is a positive integer, and the size of the conversion unit is smaller than a size of an address that constitute the protected address range.

12. A non-transitory computer accessible recording medium, which has a digital information protecting program recorded therein, the program being readable and executable to cause a computer to execute steps of a method for protecting digital information, the method comprising:

dividing, using a processor, a protected address range into a plurality of first conversion batches, converting, using the processor, an address range of each of the first conversion batches into spaces of a plurality of first address blocks of a storage device based on a first conversion unit, and generating, using the processor, a first address block rearranging rule for rearranging the first address blocks using the first address blocks as a parameter;

dividing, using the processor, the protected address range into a plurality of second conversion batches,

converting, using the processor, an address range of each of the second conversion batches into spaces of a plurality of second address blocks based on a preset second conversion unit, and generating, using the processor, a second address block rearranging rule for rearranging the second address blocks using the second address blocks as a parameter;

dividing, using the processor, the protected address range into at least one third conversion batch, converting, using the processor, an address range of said at least one third conversion batch into spaces of a plurality of third address blocks based on a preset third conversion unit, and generating, using the processor, a third address block rearranging rule for rearranging the third address blocks using the third address blocks as a parameter; and

when it is desired to load data into an address batch of the protected address range, determining, using the processor, the first conversion batch to which the address batch belongs, converting, using the processor, the address batch into a plurality of address blocks based on the first conversion unit, locating rearranged addresses of the address blocks in the protected address range according to the first, second and third address block rearranging rules, and loading the data into the spaces of the rearranged addresses thus located.

13. A digital information protecting apparatus, which is loaded with a digital information protecting program, said digital information protecting apparatus being capable of reading and executing said digital information protecting program to perform steps of a method for protecting digital information, the method comprising:

converting, using a processor, a protected address range into a space of a plurality of address blocks of a storage device based on a preset conversion unit, and generating an address block rearranging rule using the address blocks as a parameter;

when it is desired to load data into an address batch of the protected address range, converting, using the processor, the address batch into a plurality of address blocks based on the conversion unit; and

locating, using the processor, rearranged addresses of the address blocks in the protected address range according to the address block rearranging rule, and loading, using the processor, the data into spaces of the rearranged addresses;

wherein, the conversion unit has a size of (n) bits, where (n) is a positive integer, and the size of the conversion unit is smaller than a size of an address that constitute the protected address range.

14. A digital information protecting apparatus, which is loaded with a digital information protecting program, said digital information protecting apparatus being capable of reading and executing said digital information protecting program to perform steps of a method for protecting digital information, the method comprising:

dividing, using a processor, a protected address range into a plurality of first conversion batches, converting, using the processor, an address range of each of the first conversion batches into spaces of a plurality of first address blocks of a storage device based on a first conversion unit, and generating, using the processor, a first address block rearranging rule for rearranging the first address blocks using the first address blocks as a parameter;

dividing, using the processor, the protected address range into a plurality of second conversion batches,

converting, using the processor, an address range of each of the second conversion batches into spaces of a plurality of second address blocks based on a preset second conversion unit, and generating, using the processor, a second address block rearranging rule for rearranging the second address blocks using the second address blocks as a parameter;

dividing, using the processor, the protected address range into at least one third conversion batch, converting, using the processor, an address range of said at least one third conversion batch into spaces of a plurality of third address blocks based on a preset third conversion unit, and generating, using the processor, a third address block rearranging rule for rearranging the third address blocks using the third address blocks as a parameter; and

when it is desired to load data into an address batch of the protected address range, determining, using the processor, the first conversion batch to which the address batch belongs, converting, using the processor, the address batch into a plurality of address blocks based on the first conversion unit, locating rearranged addresses of the address blocks in the protected address range according to the first, second and third address block rearranging rules, and loading the data into the spaces of the rearranged addresses thus located.

15. A method for protecting digital information, comprising:

converting, using a processor, a protected address range into a plurality of address blocks of a storage device based on a preset conversion unit, and generating an address block rearranging rule using the address blocks as a parameter;

when it is desired to load data into a space of an address batch of the protected address range, converting, using the processor, the address batch into a plurality of address blocks based on the conversion unit; and

locating, using the processor, rearranged addresses of the address blocks in the protected address range according to the address block rearranging rule, and loading, using the processor, the data into spaces of the rearranged addresses;

wherein, the data loaded into the spaces of the rearranged addresses is encrypted using an encryption algorithm and an encryption code, and includes a plurality of encrypted data segments each having a size of (n) bytes;

wherein the encryption algorithm is configured to encrypt (n) bytes of the data at a time, where n is a positive integer larger than 2;

wherein in loading the data into spaces of the rearranged addresses, the processor is configured to load the encrypted data segments separately into spaces of the rearranged addresses.

16. The method of claim 15, wherein the protected address range is a storage address space of the storage device, and prior to loading the data into the rearranged addresses, each of the rearranged addresses is converted into an actual write address of the storage device according to a storage unit of the storage device.

17. The method of claim 15, wherein:

an irreproducible random sequence arranging scheme is used as the address block rearranging rule, and includes utilizing operation information of internal hardware of a computer to generate a random number sequence ranging from 0 to the number of the address blocks, and exchanging and i^th address block with an address block having an i^th position in the random number sequence to thereby generate an address conversion table; and

the rearranged addresses of the address blocks in the protected address range are located based on the address conversion table.

18. The method of claim 15, wherein, an address conversion key inputted externally is accepted, and the address block rearranging rule is constructed using a number of the address blocks and the address conversion key.

19. The method of claim 18, wherein, the address block rearranging rule is to use a reproducible random sequence arranging scheme which includes utilizing a computer function Rand with a seed to generate a random number sequence ranging from 0 to the number of the address blocks, and exchanging and i^th address block with an address block having an i^th position in the random number sequence to thereby generate an address conversion table.

20. The method of claim 19, wherein the rearranged addresses of the address blocks in the protected address range are located according to the address conversion table.

21. A method for protecting digital information, comprising:

converting, using a processor, a protected address range into a plurality of address blocks of a storage device based on a preset conversion unit, and generating an address block rearranging rule using the address blocks as a parameter;

when it is desired to load data into a space of an address batch of the protected address range, converting, using the processor, the address batch into a plurality of address blocks based on the conversion unit; and

locating, using the processor, rearranged addresses of the address blocks in the protected address range according to the address block rearranging rule, and loading, using the processor, the data into spaces of the rearranged addresses;

wherein, the address block rearranging rule is to use a reproducible random sequence arranging scheme which includes utilizing a computer function Rand with a seed to generate a random number sequence ranging from 0 to the number of the address blocks, and exchanging and ith address block with an address block having an ith position in the random number sequence to thereby generate an address conversion table.

22. The method of claim 21, wherein the protected address range is a storage address space of the storage device, and prior to loading the data into the rearranged addresses, each of the rearranged addresses is converted into an actual write address of the storage device according to a storage unit of the storage device.

23. The method of claim 21, wherein the converting unit is one of 1 byte, 4 bits and 2 bits.

24. The method of claim 21, wherein, an address conversion key inputted externally is accepted, and the address block rearranging rule is constructed using a number of the address blocks and the address conversion key;

25. The method of claim 21, wherein, the rearranged addresses of the address blocks in the protected address range are located according to the address conversion table.

26. The method of claim 21, wherein the data is encrypted data that is encrypted using an encryption algorithm and an encryption code.