DATA STORAGE SYSTEM AND METHOD FOR SECURITY INFORMATION INTERACTION

• US 20140237569A1
• Filed: 08/02/2012
• Published: 08/21/2014
• Est. Priority Date: 08/02/2011
• Status: Active Grant

• Current Assignee: China Unionpay Company Limited
• Original Assignee: China Unionpay Company Limited
• Inventors: Zhao, Wei, Shi, Feng, Gao, Yang, Xu, Jingwen
• Granted Patent: US 9,705,875 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

The present invention proposes a data storage system and method used for the security information interaction. Said data storage system used for the security information interaction comprises a security information storage device, an unlock password generating device and an unlock server. The data storage system and method used for the security information interaction disclosed in the present invention reduce the potential security risks due to the divulgement of unlock passwords, and reduce the complexity of the unlock process, as well as reduce to the potential security risks existed in the generating and writing process of the unlock password on the whole.

Claims

1. A data storage system used for the security information interaction, said data storage system used for the security information interaction comprising:

a security information storage device for storing and providing the data information related to the security information interaction;

an unlock password generating device for generating the unlock password corresponding to said security information storage device based on the original parameters extracted from said security information storage device, and writing said unlock password into said security information storage device; and

an unlock server for generating the unlock password corresponding to said security information storage device based on the original parameters acquired from said security information storage device when said security information storage device is locked, and using said unlock password to unlock said locked security information storage device.

2. The data storage system used for the security information interaction as claimed in claim 1, characterized in that, said original parameters are at least one factor being capable of uniquely identifying said security information storage device.

3. The data storage system used for the security information interaction as claimed in claim 2, characterized in that, said original parameters are the identifier of said security information storage device.

4. The data storage system used for the security information interaction as claimed in claim 3, characterized in that, said data information related to the security information interaction include an unlock password, a user password and business authentication data.

5. The data storage system used for the security information interaction as claimed in claim 4, characterized in that, said security information storage device further comprises:

a data communication interface for completing the data communication with external devices;

an unlock password initialization module for providing the original parameters corresponding to said security information storage device in response to an original parameters extracting request message from said unlock password generating device, and storing the generated unlock password from the unlock password generating device into a data storage module;

an unlock module for providing the original parameters corresponding to said security information storage device according to an original parameters extracting request message from said unlock server, and unlocking said security information storage device based on the unlock password in the unlock request message from said unlock server;

a locking module for locking said security information storage device when a predetermined condition is satisfied; and

a data storage module for storing said data information related to the security information interaction.

6. The data storage system used for the security information interaction as claimed in claim 5, characterized in that, said security information storage device further comprises an information reset module, said information reset module is used to initialize the predetermined items in said data information related to the security information interaction when said security information storage device is unlocked.

7. The data storage system used for the security information interaction as claimed in claim 6, characterized in that, said data communication interface is a USB interface.

8. The data storage system used for the security information interaction as claimed in claim 7, characterized in that, said unlock password generating device further comprises:

an original parameters extracting module for sending said original parameters extracting request message to said security information storage device, and transmitting the original parameters acquired from said security information storage device to a password generating module; and

a password generating module for generating an unlock password corresponding to said security information storage device based on said original parameters and by means of invoking a first dynamic link library, and transmitting the generated unlock password to said security information storage device.

9. The data storage system used for the security information interaction as claimed in claim 8, characterized in that, said first dynamic link library is set by a service provider or the relevant third party.

10. The data storage system used for the security information interaction as claimed in claim 9, characterized in that, said unlock server further comprises:

an original parameters acquiring module for sending an original parameters extracting request message to said security information storage device, and transmitting the original parameters acquired from said security information storage device to an unlock password generating module;

an unlock password generating module for generating an unlock password corresponding to said security information storage device based on said original parameters and by means of invoking a second dynamic link library, and transmitting the generated unlock password to an unlock initiating module; and

an unlock initiating module for configuring an unlock request message based on the generated unlock password, and transmitting said unlock request message to said security information storage device.

11. The data storage system used for the security information interaction as claimed in claim 10, characterized in that, said second dynamic link library is set by the manufacturer of said security information storage device.

12. The data storage system used for the security information interaction as claimed in claim 11, characterized in that, said security information storage device is an USBKey.

13. A data storage method used for the security information interaction, said data storage method used for the security information interaction comprising the following steps:

(A1) an unlock password generating device generating an unlock password corresponding to a security information storage device based on the original parameters extracted from said security information storage device, and writing said unlock password into said security information storage device;

(A2) an unlock server generating an unlock password corresponding to said security information storage device based on the original parameters acquired from said security information storage device when said security information storage device is locked, and using said unlock password to unlock said locked security information storage device;

(A3) said security information storage device communicating with a user terminal via a data communication interface when said security information storage device is in a non-locked state, so as to complete the interaction of the security information.

14. The data storage method used for the security information interaction as claimed in claim 13, characterized in that, said original parameters are at least one factor being capable of uniquely identifying said security information storage device.

15. The data storage method used for the security information interaction as claimed in claim 14, characterized in that, said original parameters are the identifier of said security information storage device.

16. The data storage method used for the security information interaction as claimed in claim 15, characterized in that, said security information is business authentication data.

17. The data storage method used for the security information interaction as claimed in claim 16, characterized in that, said data storage method used for the security information interaction further comprises:

(A4) locking said security information storage device when a predetermined condition is satisfied.

18. The data storage method used for the security information interaction as claimed in claim 17, characterized in that, said step (A2) further comprises:

initializing the predetermined items when said security information storage device is unlocked.

19. The data storage method used for the security information interaction as claimed in claim 18, characterized in that, said data communication interface is a USB interface.

20. The data storage method used for the security information interaction as claimed in claim 19, characterized in that, said step (A1) further comprises:

(B1) sending an original parameters extracting request message to said security information storage device, so as to acquire the original parameters from said security information storage device; and

(B2) generating an unlock password corresponding to said security information storage device based on said original parameters and by means of invoking a first dynamic link library, and transmitting the generated unlock password to said security information storage device.

21. The data storage method used for the security information interaction as claimed in claim 20, characterized in that, said first dynamic link library is set by a service provider or the relevant third party.

22. The data storage method used for the security information interaction as claimed in claim 21, characterized in that, said step (A2) further comprises:

(C1) sending an original parameters extracting request message to said security information storage device, so as to acquire the original parameters from said security information storage device;

(C2) generating an unlock password corresponding to said security information storage device based on said original parameters and by means of invoking a second dynamic link library; and

(C3) configuring an unlock request message based on the generated unlock password, and transmitting said unlock request message to said security information storage device.

23. The data storage method used for the security information interaction as claimed in claim 22, characterized in that, said second dynamic link library is set by the manufacturer of said security information storage device.

24. The data storage method used for the security information interaction as claimed in claim 23, characterized in that, said security information storage device is a USBKey.