Data storage system and method for security information interaction

• US 9,705,875 B2
• Filed: 08/02/2012
• Issued: 07/11/2017
• Est. Priority Date: 08/02/2011
• Status: Active Grant

• Current Assignee: China Unionpay Company Limited
• Original Assignee: China Unionpay Company Limited
• Inventors: Zhao, Wei, Xu, Jingwen, Gao, Yang, Shi, Feng
• Primary Examiner(s): Patel, Ashok
• Assistant Examiner(s): Farooqui, Quazi
• Application Number:
  US14/235,781
• Publication Number:
  US 20140237569A1
• Time in Patent Office: 1,804 Days
• Field of Search: 726 1- 8
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

The present invention proposes a data storage system and method used for the security information interaction. Said data storage system used for the security information interaction comprises a security information storage device, an unlock password generating device and an unlock server. The data storage system and method used for the security information interaction disclosed in the present invention reduce the potential security risks due to the divulgement of unlock passwords, and reduce the complexity of the unlock process, as well as reduce the potential security risks existed in the generating and writing process of the unlock password on the whole.

Claims

1. A data storage system used for security information interaction, said data storage system used for security information interaction comprising:

a USB key security information storage device for storing and providing data information related to the security information interaction;

an unlock password generating device for generating an unlock password corresponding to said USB key security information storage device based on original parameters extracted from said USB key security information storage device, and writing said unlock password into said USB key security information storage device, wherein said unlock password generating device further comprises;

an original parameters extracting module for sending a password generation original parameters extracting request message to said USB key security information storage device, and transmitting the original parameters acquired from said USB key security information storage device to a password generating module; and

said password generating module for generating an unlock password corresponding to said USB key security information storage device based on said original parameters, and transmitting the generated unlock password to said USB key security information storage device,

wherein said password generating module generates said unlock password corresponding to said USB key security information storage device by invoking a first dynamic link library and a second dynamic link library,

wherein said first dynamic link library and said second dynamic link library are set by different providers; and

an unlock server for generating the unlock password corresponding to said USB key security information storage device based on the original parameters acquired from said USB key security information storage device when said USB key security information storage device is locked, and using said unlock password to unlock said locked USB key security information storage device, wherein said unlock server further comprises;

an original parameters acquiring module for sending an unlock password generation original parameters extracting request message to said USB key security information storage device, and transmitting the original parameters acquired from said USB key security information storage device in response to said unlock password generation original parameters extracting request message to an unlock password generating module;

said unlock password generating module for generating an unlock password corresponding to said USB key security information storage device based on said original parameters and transmitting the generated unlock password to an unlock initiating module; and

said unlock initiating module for configuring an unlock request message based on the generated unlock password, and transmitting said unlock request message to said USB key security information storage device,

wherein said USB key security information storage device further comprises;

a data communication interface for completing the data communication with external devices;

an unlock password initialization module for providing the original parameters corresponding to said USB key security information storage device in response to said original parameters extracting request message from said unlock password generating device, and storing the generated unlock password from the unlock password generating device into a data storage module;

an unlock module for providing the original parameters corresponding to said USB key security information storage device according to said original parameters extracting request message from said unlock server, and unlocking said USB key security information storage device based on the unlock password in the unlock request message from said unlock server;

a locking module for locking said USB key security information storage device when a predetermined condition is satisfied,

wherein said predetermined condition is a failure to provide a correct unlock password.

2. The data storage system used for the security information interaction as claimed in claim 1, wherein said original parameters are at least one factor for uniquely identifying said USB key security information storage device.

3. The data storage system used for the security information interaction as claimed in claim 2, wherein said original parameters are the identifier of said USB key security information storage device.

4. The data storage system used for the security information interaction as claimed in claim 3, wherein said data information related to the security information interaction include an unlock password, a user password and business authentication data.

5. The data storage system used for the security information interaction as claimed in claim 4, wherein said USB key security information storage device further comprises:

a data storage module for storing said data information related to the security information interaction.

6. The data storage system used for the security information interaction as claimed in claim 5, wherein said USB key security information storage device further comprises an information reset module, said information reset module is used to initialize the predetermined items in said data information related to the security information interaction when said USB key security information storage device is unlocked.

7. The data storage system used for the security information interaction as claimed in claim 6, wherein said data communication interface is a USB interface.

8. The data storage system used for the security information interaction as claimed in claim 1, wherein said first dynamic link library is set by a service provider or the relevant third party.

9. The data storage system used for the security information interaction as claimed in claim 1, wherein said second dynamic link library is set by the manufacturer of said USB key security information storage device.