The Research And Design For The Access Control System Of USB Interface

With the USB storage device price's drop, causes it become one of necessity for people who work in IT. According to recent survey, whether it is for business or personal, USB storage devices have become one of the important tools for information leakage and the spread of the virus.There are a lot of products about the control on USB interface, such as "USB Control Master", "Panda computer USB controller", but most of them are targeted at enterprise internal network. The products are targeted at the PC very lack, at the same time the products that targeted at PC scarcely consider the problems of the safety on USB interfaces. Specifically for the small number of USB control systems don't work effectly at all and inconvenient to users because users must reboot the system if the permissions be modified.At the same time, the anti-virus programs do not take the initiative to the new USB storage devices for virus detection and killing.After the author refers to the mass similar products on markets and the related paper, the author designed one scheme that not only facilitate but also can solve the existence security problem when USB device connect to PC. This scheme divides the system into the control module and the management module, the control module work in the system backstage and it is transparent to the user, accepts the management module management and watch, mainly completes the functions that the USB read-write control as well as find and kill the virus on USB device. The control module is transparent to the user and work in the backstage, but accepts the management module a series of management. The management module is the only module that user can directly operate.Its main functions are as follows: Assign the default permissions for the USB interface; Assign the special permission in USB storage devices; the log management module. The USB monitor system have a stronger control than the similar products on the personal computer.At the same time, our system provid a safer and more simple mode of operation, and the system conside the vius threat on USB storage devices. During the time of thesis writing, the main tasks must be finished as follwing: Research on the standard USB protocol, USB software and USB hardware model ,USB bus Communication Theory and so on. Research on the dynamics of hot-plug USB peripherals and USB storage devices to identify. Research on the control of USB storage devices reading and writing. Research on how to preservation and anti-modification the strategy document. Research on the virus spread means though USB storage devices and put forward a solution to achieve virus detection and killing.For the organize of this article, at first this paper introduce the system of theoretical knowledge, and then discuss the overall framework of the system composed of modules and systems; further divided the control module and the management of client-side modules were designed to discuss the idea and use of key technologies; then introduce the system as a whole The key point of the specific ideas and how to realize all functions; Finally this paper analyse the advantages of the system and the existence of the problem ,at the last part,we put forward ideas to improve the next step.