| Security of usb storage devices is an important aspect of storage security, aiming at thesecurity demand to encrypt data in usb storage devices, an usb storage encryption machinebased on XTS-AES is designed and implemented, which can provide encryption service forordinary usb storage devices. The design principles and implement techniques of the usbstorage encryption machine are discussed in the paper.On the basis of analyzing working principles of usb storage devices and researching onencryption technique of usb storage devices, aiming at the security demand of storage devices,the security architecture of usb storage encryption machine is designed, which includes accesscontrol based on security partition, double authentication based on encryption machinepassword, and data encryption based on XTS-AES. The system architecture of usb storageencryption machine is proposed，the system hardware is designed and implemented, whichincludes Nios II, usb host module, usb devices module and XTS-AES module, and thefirmware is also designed, which has the function of usb data transmission, encryptionmachine authentication, storage device authentication, access control based on securitypartition. The prototype system of usb storage devices is built, and the key modules, systemfunctions and system performance are tested, the feasibility of security architecture andprinciple structure is also verified. The usb storage devices proposed in the paper has thecharacteristics of good generality, transparent encryption, free of drivers and easy to be used.The research production of the paper can provide practical value for the development of usbstorage machine encryption. |
