Research And Design Of U Disk Encryption Device Based On Embedded Technology

With the people stepped into the information age, people have more and more needs of the data storage and transmission. U disk as a low cost, easy to use, easy to carry information carrier, has been widely used. More and more people use U disk as a media of data storage and exchange. However, the process of usage is that data has been often written directly to the U disk. Once U disk lost, the data are also leaked.Therefore, information security incidents involving U disks are also common. The existing U disk encryption solutions are difficult to fully meet the operational convenience, low cost, high security, scalability and other needs, so there is no an U disk encryption solution which is widely accepted. Thus, the design of a safe and reliable use of U disk encryption solution has important research and practical significance.In this thesis, the existing U disk encryption technologys are analyzed in depth,and their advantages and disadvantages are summarized. In view of these shortcomings,the embedded U disk encryption scheme is proposed. The solution has the following characteristics:1) The ARM processor S5PV210 of SAMSUNG Elecronics is used as the master chip. According to the high security requirements, the embedded Linux system is transplanted. Identity authentication, file read and write, the firmware of overall operation are running in the Linux environment. It is of higher security.2) A dual identity authentication process is presented for the first time. The first round of identity authentication draws on the Unix system password storage technology. Using the hash algorithm to preserve the hash value of password and salt value, to avoid the password being cracked; the second round uses one time password technology. The password has a certain valid period. It greatly increases the difficulty of cracking. The combination of the two authentication schemes greatly improves the security of identity authentication.3) In order to improve the system encryption and decryption speed, it takes the usage of hardware to achieve AES advanced encryption algorithm. This thesis designs an AES IP core, which supports for full advanced encryption algorithm. The IP core of AES ensures that a certain throughput requirements, but it costs as little as possible consumption of resources. In comparison with other similar designs, it has an obvious advantage. Then, according to the characteristics of practical application in this thesis,the key length and working mode supported by AES are defined, and the IP core of AES128_CBC is designed and flashed on the XC6SLX45 chip.4) This thesis designed a reliable anti-shake blocking button driver and efficient AES128_CBC module miscdevice driver.Finally, this thesis tested the platform which was designed and implemented according to the solution. The test results show that the solution has the advantages of high security of encryption and decryption data, expansion of storage capacity, easy operation and compatibility with existing hardware and software platforms. Speed of encryption or decryption is steady at 162KB/S. It fully meets the general document encryption and decryption needs.