【作者】 李亚强；

【导师】 张岩；

【作者基本信息】 哈尔滨工业大学 ， 微电子学与固体电子学， 2010， 硕士

【摘要】 随着信息技术的飞速发展,数据安全日益受到人们的重视。普通U盘具有容量大、低成本等优点,但是它存储的数据很容易被他人读出,无法满足大量数据安全存储应用的需求。本文充分考虑了各种应用需求的不同,从中抽象出一个可扩展的应用模型,并在这个应用模型的基础上设计了一个应用于大容量安全存储设备的加密U盘,它具有高安全性、可扩展性、可裁减性、易移植性等特点。当面对新的应用时,加密U盘可通过提供的SDK(Software Development Kit,即软件开发工具包)接口,上层仅做少量改动甚至不需要改动的情况下迅速满足应用的需求,因此能够大幅降低研发成本,为大容量安全存储市场各种不同的需求提供一个统一的解决方案。在系统架构的基础上进一步分析对USB设备初始化、BOT(Bulk Only Transport,批量数据传输协议)协议实现、SDK接口设计、客户端软件设计等内容进行分析,在国民技术安全加密芯片Z8HM2的基础上设计了一个加密U盘的整套方案并加以实现,提供了基础的U盘操作接口、客户端软件,并能够支持多种国际认证的硬件加密算法,如AES、SCB2等,能够广泛应用于移动办公、电子商务、电子政务、网络银行、云计算等领域。更多还原

【Abstract】 As the rapid development of information technologies, much more emphasis was taken on the problem of data securities. With greater capacity and lower cost, however, USB disk is easy to be read by others and cannot satisfy the demands of security storage or applying of bulks of data. With the analysis of such demands at all areas in the market, the author has built an application model of extension possible, on which one secured U-Disk was designed, which has its standpoint of higher security, extension possibility, easy-going as well. On facing new applying and new hardware environment, secured U-Disk will easily meet the needs of applying via SDK (Software Development Kit) with a little or even without changes which will dramatically lower the cost, offering a uniform solution to numbers of demands of great capacity and security storage market. With a general narrate basis, the thesis explains USB device initialization, BOT (Bulk Only Transport) protocol implement, SDK interface design and client software for windows. Based on security IC named Z8HM2 of Nationz Technology Corporation, a full set of solutions were designed and realized, which provides basic functions of command control interface and client software, and enable to support manifold encrypt arithmetic identified by national secret bureau, such as AES, SCB2, one widely applied in the demands of mobile officing, electronic commerce, electronic government, internet bank as well as cloud computing and so on.更多还原