A Study On The Technique Of The Monitoring Mobile Device Based On USB

With the high speed of the computer development, it is more and more important to us that the computer technique applies in people's everyday life. People more and more rely on the computer in their lives. The USB removable devices have become the main type of the removal storage medium, replacing the traditional Floppy disk. When people enjoy its convenience, fast, reliable and flexible, the new focus of the security problem it brings rises up. The unauthorized users can swiftly take the private information, national security or business message away through the USB removable device without any clue left, using the PC with nobody around.This article is the author's theory sum-up and improvement after joining in the development of the monitoring LAN security subject. With comparing major function of the same kind of the product type, this software system the author builds improves the normal control ability of the removable device and provides more way to control it. Even more, the software uses the valid USB device ID character to protect the sensitive data from the invalid one's visiting. The author uses the following tools to implement the software: Windows 2000 DDK, Visual C++ 6.0, DebugView.exe and DevView.exe. Let's take a look at the system internal: the system consists of three modules: one is FileFiler.dll, the other is usbconfig.exe and the last is usbfilter.sys. Through them the software takes control of the USB device in application level and the driver level and reduces the security threaten mostly which the USB devices bring to the PC. This article analysises and repairs threaten based on a sentense that says "the unauthorized device takes the security data away".As the security data aspect, the software uses the USB key method to enhance the protection of the OS to the sensitive data, which can mostly hold up the stealing.As the USB device aspect, the software provides some control mode to the USB device:completely forbiding the USB device, forbiding the USB storage device, forbiding the USB device reading and writing, the USB device read-only in file level, permitting all USB device operation. Through the control mode, the software system can fit all kinds of user demand.As the "fetch" operation aspect, the software strictly monitors the action of the USB device file operation and saves the operation in log file.The author's mainly research during this article:1. Research the USB specificaion stardard, USB hardware and software architecture, USB communication data stream.2. Analysis the plug-and-play procession, recognize and locate the driver inforamtion when the device is inserted to the PC.3. Research the operation of the USB device and take control of it.4. Research on the WDM and other dirver model.5. Help the OS to recognize the valid USB device.6. Implement of the upper in code.The whole article organized like this: first let the reader know some important concept of the USB system. Then discuss the feasibility of the USB device control. This chapter is divided into three parts: detecting the device insertion, locating the device driver infomation, and discussing the method of the monitoring device operation. After that, reseach the WDM and filter driver framework as the base of the program design. Then describe the whole software system design and implement. At last summarize and discuss the advantage of the system and bring forward the way to improve the software system.