CN100452000C - Portable storage device and method for automatically executing biological identification application program - Google Patents

Abstract

A portable storage device and a method for automatically executing a biometric application program are provided. The control module is electrically connected with a terminal host, the memory module and the biosensor. The control module is stored with firmware. The firmware is designed to: the memory module is partitioned into a plurality of blocks including at least a biometric application block and a security block. The biological identification application program block stores at least one biological identification application program; an operating system of the terminal host is prompted to regard the biometric application program block as an optical disc storage device, and the optical disc storage device is closed after at least one biometric application program is automatically executed. At least one biometric application program guides a user to enable a specific operation after passing through a biometric program. The portable storage device of the invention can be randomly plugged and used in various terminal hosts and guide a user to carry out a biological identification program.

Description

Portable storage device and method for automatically executing biometric application

technical field

The present invention relates to a portable storage device, in particular to a portable storage device capable of automatically executing biometric application programs. The present invention is also related to the following patents of some inventors: (a) Chinese invention patent application number 200310116995.X, the application date is December 5, 2003, and the title of the invention is "memory storage device with fingerprint sensor and its storage (b) China Invention Patent Application No. 200410038204.0, the application date is May 13, 2004, and the title of the invention is "portable encrypted storage device with biometric identification and protection method for its stored data"; And (c) China Taiwan Invention Patent Application No. 092133579, the application date is November 28, 2003, the title of the invention is "identity electronic key and its control method", and the patent has been approved at present.

Background technique

Traditionally, the simplest way to represent a person's identity is a document, such as an ID card, a driver's license, etc., with personal photos and text and digital records attached to it. However, the counterfeiting of identity documents is too easy, and thus causes many crimes.

A further improvement method is to use magnetic stripe cards to record personal data. Similarly, the advancement of technology makes magnetic stripe cards easy to crack.

The latest method is to protect personal data in a confidential way using chip cards. Basically, regarding the confidentiality of personal data by memory chips, the most commonly used method is to adopt password protection. However, using passwords to protect personal data not only has the trouble of users easily forgetting passwords, but also has the danger of passwords being cracked.

At the same time, the above-mentioned devices representing personal identity (except the chip card) can only perform a single function, and cannot integrate multiple applications into a single device.

Therefore, U.S. Patent Publication No. 2003/0110389 A1 discloses a personal identification electronic device similar to a solid-state memory flash drive, which contains encrypted personal data and can be directly connected to a computer system for use. However, this personal identification electronic device also needs a password setting to open it, which faces the aforementioned problems. The best way to solve this problem is to use unique personal biometrics, such as fingerprints, voiceprints, handwriting, iris and other biometric methods to provide a more complete and effective data protection method. Its advantage is that the biometric feature is portable and does not need to be memorized, and it cannot be stolen. In particular, the biometric feature protection method combined with fingerprints is not only strict, but also very convenient to use.

In recent years, thanks to the invention of the chip-type fingerprint sensor, it is no longer an unfeasible technology to integrate a fingerprint reading device into a thin, light and small electronic product. For related technical content, please refer to the following patents of Zhou Zhengsan, one of the inventors in this case: 1. China Invention Patent Application No. 02105960.8, the application date is April 10, 2002, the invention name is "capacitive fingerprint reading chip", the publication number is 1450489; 2. China Invention Patent Application No. 02123058.7, the application date is On June 13, 2002, the name of the invention was "Pressure-type fingerprint reading chip and its manufacturing method", the publication number was 1464471; It is "Temperature Sensor and Its Fingerprint Recognition Chip Using the Temperature Sensor", the publication number is 1463674; and 4. The Chinese Invention Patent Application No. 02132054.3, the application date is September 10, 2002, and the invention name is "capacitive pressure micro Sensor Element and Its Application Fingerprint Reader Chip Structure", Publication No. 1482440. This also opens up a new way of protecting personal storage media.

As early as 20 years ago, US Patent No. 4,582,985 disclosed a storage medium protection method, wherein fingerprint authentication was used to protect the personal data stored in the personal identification card device. After the fingerprint identification procedure is passed, the protected data stored in the card device can be output for subsequent processing or authentication procedures. The size of this device is the same as that of a current general-purpose credit card, and it mainly includes a fingerprint sensor, image processing and identification module and storage memory, and becomes a completely independent fingerprint identification device (that is, fingerprint capture and identification are all in the same executed on the device).

Chinese patent CN1302018A discloses a method for controlling the read and write rights of a data storage device through fingerprint identification. However, this patent does not explicitly disclose the format and interface of the storage device.

Similarly, the European Patent EP124079A1 also discloses the same data protection concept as the aforementioned US Patent No. 4,582,985, the difference is that the communication interface is a golden finger design for the SD card interface. In addition, the memory device of the '079 patent has a fingerprint recognition module, and its data protection concept is the same as that of the '018 patent, except that the communication interface of the '079 patent is a golden finger structure for SD card interface. Similarly, US Patent Publication No. US2001/0023375 A1 also discloses a method for protecting data stored in a hard disk or a flash disk through fingerprint identification.

World Patent WO 02/42887A2 discloses a data protection concept similar to the aforementioned US Patent No. 4,582,985 and European Patent EP124079A1. The difference is that the communication with the terminal system is performed through the USB interface. This device is similar to the current market The difference between popular flash memory hard drives is that they contain independent fingerprint processing and identification modules.

U.S. Patent Publication No. 2003/005337 discloses the same data protection concept as the aforementioned U.S. Patent No. 4,582,985 and European Patent EP124079A1, and also uses USB as a communication interface disclosed in World Patent WO 02/42887A2. However, it is also a stand-alone fingerprint recognition device.

British Patent No. GB2387933 also discloses an almost identical concept and device design to WO 02/42887A2 and U.S. Patent Publication No. 2003/005337, which is an independent fingerprint identification device.

So far, the above-mentioned inventions containing fingerprint recognition devices, except for the application in the US Patent No. 4,582,985, are only used for data protection and do not cover this application and function.

In addition, the basic requirement of the above-mentioned portable storage device including the fingerprint identification device is to enable the user to connect the storage device to different computer systems for use. However, even if the USB interface is used for the above-mentioned storage device design with fingerprint identification function in the prior art, it is still necessary to install a fingerprint application program on the computer system in advance, so that the computer system can provide a man-machine interface for the user to use conveniently. The traditional method is to provide a CD for the user to install the fingerprint application program, so that the entire storage device can be used conveniently. In this case, in the first setting of each computer system, in addition to carrying the portable storage device, the user also needs to carry a CD to use the storage device in other computer systems.

In summary, the purpose of the above prior art is to provide a storage device for protecting stored data through fingerprint identification. When using this device, the user must install the fingerprint application software in the terminal system in advance. Therefore, the fingerprint application program in the storage device cannot be easily plugged and played in various computers.

Therefore, the above-mentioned Chinese invention patent application No. 200310116995.X discloses a storage device that uses this technology to allow the operating system of the terminal system to automatically execute the fingerprint application program. The technology is to use a specific block of the analog memory module as a CD The boot area of -ROM, and place the fingerprint application program in it to achieve the function of autorun.

The above-mentioned Taiwan invention patent application No. 092133579 also discloses a storage device which has a fingerprint sensor and various portable application programs to be used as an electronic identity key representing personal identity. By automatically executing the fingerprint application program technology so that it can be used in a variety of different end systems.

In addition, the above-mentioned Chinese invention patent application number 200410038204.0 discloses a design of a hard disk device, which has the advantage of automatically executing fingerprint application programs through the same design as in the previous two patent applications, and can be used between different computers at any time. .

Continuing the above-mentioned invention, the present invention will provide a process design for cutting the storage space of the portable storage device and automatically executing the biometric application program.

Contents of the invention

Therefore, an object of the present invention is to provide a portable storage device capable of automatically executing a biometric application program. The portable storage device carries a biometric application program and related firmware, so that the portable storage device can Arbitrarily achieve plug-and-play on various terminal hosts and guide users to perform biometric identification procedures.

To achieve the above purpose, the present invention provides a portable storage device capable of automatically executing biometric application programs, which basically includes a control module, a biosensor and a memory module. The control module basically includes a microprocessor, a random access memory (RAM) and a read-only memory (ROM), the RAM is used as a working memory for data processing, and the ROM stores firmware that makes the storage device work , the control module has a host interface for electrical connection with a terminal host. The biosensor is electrically connected to the control module. The memory module is electrically connected to the control module through a memory interface. The firmware stored in the control module communicates with the memory module, the biosensor and the terminal host. The firmware is further designed to: divide the memory module into a plurality of blocks, and the blocks at least include a biometric application block simulated as an optical disc storage device and a block designed as a removable hard disk a public block, the biometric application block stores at least one biometric application; and after the control module is connected to the terminal host, an operating system of the terminal host is prompted to regard the biometric application block as It is an optical disc storage device, and automatically executes the at least one biometric application program as a background program, and after installing a call menu in the operating system, closes the optical disc storage device, and then makes the operating system convert the public area The block is accessed as a first removable hard disk.

The present invention also provides a portable storage device capable of automatically executing biometric application programs, which basically includes a control module, a biosensor and a memory module. The control module basically includes a microprocessor, a random access memory (RAM) and a read-only memory (ROM). The RAM is used as a working memory for data processing, and the ROM stores firmware that makes the storage device work. The control module has a host interface for electrical connection with a terminal host. The biosensor is electrically connected to the control module. The memory module is electrically connected to the control module through a memory interface. The firmware stored in the control module communicates with the memory module, the biosensor and the terminal host. The firmware is further designed to: divide the memory module into multiple blocks, the blocks at least include a biometric application block simulated as an optical disc storage device and a security block, the biometric application At least one biometric application program is stored in the block; after the control module is connected to the terminal host, the terminal host is prompted to regard the biometric application program block as an optical disc storage device by an operating system, and automatically execute The at least one biometric application becomes a foreground program to guide a user to perform a biometric procedure in real time; and when the user passes the biometric procedure, the firmware prompts the operating system to close the optical disc storage device, and The secure block is accessed as a removable hard disk.

The present invention also provides a device for accessing a large-capacity storage unit of the portable storage device as a removable hard disk, and a method for enabling the operating system of the terminal host to execute background programs and foreground programs.

The beneficial effect of the present invention is that, through the portable storage device of the present invention, the user can take the application program away, so that the portable storage device can be applied to various terminal hosts without manually installing special s application. The user only needs to perform the plugging and unplugging action of the hardware, and does not need to worry about the software installation at all. At the same time, through the execution of the biometric identification program, the private data in the portable storage device can be effectively protected.

Description of drawings

FIG. 1 shows a schematic block diagram of a portable storage device according to a first embodiment of the present invention.

FIG. 2 shows a schematic block diagram of a portable storage device according to a second embodiment of the present invention.

FIG. 3 shows a schematic block diagram of a portable storage device according to a third embodiment of the present invention.

FIG. 4 shows a schematic block diagram of a portable storage device according to a fourth embodiment of the present invention.

FIG. 5 shows a schematic block diagram of a portable storage device according to a fifth embodiment of the present invention.

FIG. 6 shows a flowchart of a method for automatically executing a biometric identification application according to a sixth embodiment of the present invention.

FIG. 7 shows a flowchart of a method for automatically executing a biometric identification application according to a seventh embodiment of the present invention.

Description of main component symbols:

1～Portable storage device 2～Terminal host

10～control module 10A～microprocessor

10B～RAM 10C～ROM

12～host interface 14～memory interface

16～storage interface 20～memory module

21～biological application block 22～public block

24～Secret block 26～Hidden block

30～biological sensor 32～digital signal processor

40～expansion slot 50～external memory

60～encryption/decryption chip 70～storage interface expansion slot

80～mass storage unit 500-560～method steps

600-670～method steps

Detailed ways

FIG. 1 shows a schematic block diagram of a portable storage device according to a first embodiment of the present invention. As shown in FIG. 1 , the portable storage device 1 of this embodiment basically includes a control module 10 , a memory module 20 and a biosensor 30 . The control module 10 has a host interface 12 for connecting with a terminal host 2 . The memory module 20 is electrically connected to the control module 10 through a memory interface 14 . At least one biometric application program is stored in the memory module 20 . The biosensor 30 is electrically connected to the control module 10 through the memory interface 14 or other interface such as the serial peripheral interface SPI. The biometric sensor 30 in this embodiment is a fingerprint sensor, especially a chip-type fingerprint sensor, including area-type and slide-type fingerprint sensors. Other types of sensors are also possible, such as voiceprint, face shape, iris or other biometric sensors. In the present embodiment, host interface 12 is the interface of universal serial bus (USB), but also can be a PCMCIA interface, PCI high-speed (PCI EXPRESS) interface or an IEEE 1394 interface or the interface of other standards. The memory module 20 is a non-volatile memory, which is a flash memory in this embodiment, and may also be a programmable read-only memory (PROM), read-only memory (ROM) or electrically erasable read-only memory (EEPROM).

Control module 10 comprises a microprocessor 10A, a random access memory (RAM) 10B and read-only memory (ROM) 10C, and this RAM 10B is used as the working memory when data processing, and this ROM 10C is stored with making this storage device working firmware. That is, the control module 10 stores firmware for communicating with the memory module 20 , the biosensor 30 and the terminal host 2 . In order to achieve the effect of the present invention, the firmware is designed to divide the memory module 20 into multiple blocks, and the blocks include at least one biometric application block 21, a public area designed as a removable hard disk Block 22 and at least one security block 24, wherein the at least one biometric application block 21 stores at least one biometric application and is simulated as an optical disc storage device. The security block 24 is designed as a removable hard disk. Alternatively, the blocks may further include at least one hidden block 26 . The firmware can be designed such that the common block 22 is accessed as a removable disk before the biometric authentication process is passed. The hidden block 26 is designed to store encryption and decryption application key, biometric template and other data. Of course, the hidden block 26 can also be designed to be merged with the biometric application block 21 .

The firmware can also be designed to prompt an operating system of the terminal host 2 to regard the at least one biometric application block 21 as an optical disc storage device after the control module 10 is connected to the terminal host 2, and use the optical disc to store The starting technology of the device, the operating system can automatically execute at least one biometric application program in the optical disc storage device into a background program, and after installing a call menu in the operating system, close the optical disc storage device, and then make the operating system to The public block is accessed as a first removable hard disk. Then, when the call menu is called, the at least one biometric application guides a user through a biometric procedure, and when the biometric procedure is passed, enables or activates a specific operation, whereby the firmware causes the secure block to be accessed as a second removable hard disk. Moreover, the firmware can also be designed to prompt the operating system of the terminal host 2 to automatically remove the calling menu after the control module 10 is disconnected from the terminal host 2 .

The biometric application guides the user to execute the biometric procedure in ways including but not limited to voice, text, and picture display. Specific operations include but are not limited to: accessing specific blocks in the memory module 20 , enabling applications in the operating system of the terminal host 2 , such as email sending and receiving programs, file transfer programs, website login authentication, and the like.

In this embodiment, the operating system regards the biometric application program as a background program, that is, the biometric application program does not immediately obtain the master control right, but is quietly installed in the operating system. When the user needs to perform the aforementioned specific operations, the biometric identification procedure is executed by calling the menu. Therefore, the call menu of the background program can be located in a system tray (System Tray), a mouse right button menu (Right Button Menu) or an application program menu (Application Program Menu) in the operating system. In other words, a small icon can appear in the system tray located at the lower right corner of the window for the user to call. Alternatively, when the user presses the right mouse button, a call menu for a specific operation may appear. Alternatively, the call menu can be embedded in a function block of an application program (such as an email program) in the operating system.

As an example of the usage process, when the portable storage device 1 is connected to the terminal host 2, the terminal host 2 regards the biometric application program block 21 as an optical disc storage device, if the file manager of the operating system of the terminal host 2 Open it, and a CD-ROM storage device will be displayed in the file explorer. Therefore, the operating system of the terminal host 2 can automatically execute the biometric application stored in the biometric application block 21 as a background program. After the background program menu is installed, the firmware prompts the operating system to close the optical disk storage device, and the public block 22 appears, and the public block 22 is regarded as the first removable hard disk. Therefore, the content of the first removable hard disk representing the public block 22 can be displayed in the file manager of the operating system (for convenience of description, it is referred to as D disk), and the public block 22 does not need biometrics at all. The storage space that the identification program can freely access. Through the call of the background program menu, the biometric application program guides the user to execute the biometric procedure. After the biometric procedure is passed, the security block 24 appears, and the operating system regards the security block 24 as the second removable hard disk. Therefore, the file manager of the operating system can display the content of the second removable hard disk (for convenience of description, referred to as the E disk) of the security block 24 . It is worth noting that the D drive and E drive under a design structure can coexist in the file manager of the operating system. Under another design structure, only one disk can appear in the file manager of the operating system, that is, the D disk (public block 22) must be closed first and then switched to the E disk (secure block 24), or the D disk Disk (common block 22) must first be closed and then switch to D disk (secure block 24). In this case, the specific operation is to disable the public block 22 that is accessed as the removable hard disk, and to enable the private block 24 to be accessed as a removable hard disk.

In addition, the firmware and the biometric application are designed to remove the warning message from the operating system when the optical disk storage device storing the executed biometric application is turned off and the common block 22 appears. For example, in this case, the Windows 2000 operating system will generate a warning message, and the device's firmware and the biometric application need to work together to intercept the warning message.

FIG. 2 shows a schematic block diagram of a portable storage device according to a second embodiment of the present invention. As shown in FIG. 2 , this embodiment is similar to the first embodiment, except that the memory module 20 of this embodiment has no common block. As an example of the usage process, when the portable storage device 1 is connected to the terminal host 2, the terminal host 2 regards the biometric application program block 21 as an optical disc storage device, if the file manager of the operating system of the terminal host 2 Open it, and a CD-ROM storage device will be displayed in the file explorer. Therefore, the operating system of the terminal host 2 can automatically execute the biometric application stored in the biometric application block 21 (disc storage device) as a foreground program. The foreground program guides the user to perform the biometric identification process in real time. After passing the biometric identification procedure, the firmware prompts the operating system to close the optical disk storage device and switch to the security block 24, and the security block 24 is regarded as a removable hard disk at this time. In other words, the removable hard disk of the security block 24 can be displayed in the file manager of the operating system (for convenience of description, it is called D disk). Here, the specific operation is to make the operating system access the secure block 24 as a removable hard disk.

FIG. 3 shows a schematic block diagram of a portable storage device according to a third embodiment of the present invention. As shown in FIG. 3 , this embodiment is similar to the first embodiment, except that the portable storage device 1 further includes an expansion slot 40 for connecting an inserted external memory 50 to the control module 10 . This memory expansion slot 40 is in order to expand the capacity of the memorizer of device of the present invention substantially, or by treating this device as the reader (memory reader) of an external memory 50, this external memory can be CF card, smart type Media (smart media), memory stick (memory stick) or other external memory with standard interface, or hard disk (especially hard disk of one inch or smaller, also known as microdrive (microdrive)). The expansion slot 40 is electrically connected to the control module 10 through the memory interface 14 for electrically connecting with an external memory 50 so as to increase the memory capacity of the memory storage device. After the external memory 50 is inserted into the expansion slot 40, the control module 10 plans the external memory 50 into a single expanded security block for storing additional data to be protected. In this way, the device can provide any data protection method for the external memory 50 . It should be noted that the expansion slot 40 and the external memory 50 in FIG. 3 can be respectively applied to the background program status in FIG. 1 and the foreground program status in FIG. 2 .

FIG. 4 shows a schematic block diagram of a portable storage device according to a fourth embodiment of the present invention. As shown in Fig. 4, this embodiment is similar to the second embodiment, and it is also the situation of the foreground program. The difference is that the portable storage device 1 also includes an encryption/decryption chip 60, a storage interface expansion slot 70 and a large-capacity storage unit 80, and the memory module 20 lacks the security block 24. The encryption/decryption chip 60 is connected to the control module 10 through a storage interface 16 . The storage interface expansion slot 70 is connected to the encryption/decryption chip 60 . The mass storage unit 80 is connected to the control module 10 through the storage interface expansion slot 70 and the encryption/decryption chip 60 . In this embodiment, the specific operation is to make the mass storage unit 80 accessible by the end host 2 . The terminal host 2 can access the mass storage unit 80 through the encryption/decryption chip 60 and a key stored in the memory module 20 . One embodiment of the mass storage unit 80 is a magnetic hard disk, especially a 3.5-inch, 2.5-inch or other size hard disk. Another embodiment of the mass storage unit 80 is CD-R/RW and DVD-R/RW and any standard optical disc device.

In addition, the control module 10 provides a memory interface 14 to connect the memory module 20 and the biosensor 30, and the control module 10 provides a host interface 12 to connect with the external terminal host 2, which is the same as the host interface in the first embodiment. And storage interface 16 and storage interface expansion slot 70 are IDE interface in the present embodiment, yet also can be the interface of SCSI interface, Serial ATA interface, a CompactFlash (CF) interface, a PCMCIA interface or IEEE 1284 interface or other standards.

The memory module 20 is a non-volatile memory, which is a flash memory in this embodiment, and may also be a programmable read-only memory (PROM), read-only memory (ROM) or electrically erasable read-only memory (EEPROM).

In an embodiment of the present invention, the device used in the above-mentioned present invention includes the control module 10, the encryption and decryption chip 60, the memory module 20 and the biosensor 30, which can also be integrated under the system-on-chip (SOC) design framework. For a single chip to reduce costs.

The memory module 20 is divided into: a biological application block 21 for storing at least one biological identification application; and a hidden block 26 for storing at least one biological template and a key. The biological template is data encrypted with a key. The encryption/decryption chip 60 is connected to the control module 10 through a storage interface 16 .

As an example of the usage process, when the portable storage device 1 is connected to the terminal host 2, the terminal host 2 regards the biometric application program block 21 as an optical disc storage device, if the file manager of the operating system of the terminal host 2 Open it, and a CD-ROM storage device will be displayed in the file explorer. Therefore, the operating system of the terminal host 2 can automatically execute the biometric application stored in the biometric application block 21 (disc storage device) as a foreground program. The foreground program guides the user through the biometric identification process. After passing the biometric identification procedure, the firmware prompts the operating system to close the optical disk storage device and switch to the mass storage unit 80, and at the same time the control module 10 will transmit the key used by the encryption/decryption chip 60 from the memory module 20 to the encryption/decryption In the chip 60, a real-time encryption and decryption engine is used to access the portable mass storage unit. At this time, the operating system of the terminal host regards the mass storage unit 80 as a removable hard disk for access. In other words, the removable hard disk of the large-capacity storage unit 80 (for convenience of description, referred to as the D disk) can be displayed in the file explorer of the operating system.

The encryption/decryption chip of this device uses a symmetric algorithm---DES (Data Encryption Standard) or TripleDES (Triple Encryption Data Encryption Standard) or AES. The encryption/decryption chip can process 1.6Gbits/sec data in real time, so there will be no time delay for data access to large-capacity storage units, which is more efficient than software encryption and decryption, and also faster than software Not easy to be cracked. Of course, for cost considerations, the hardware encryption and decryption chip in the present invention can also be omitted, and replaced by software encryption and decryption. Under this embodiment, the mass storage unit 80 is directly connected to the control module 10 through the storage interface 16 without the storage interface expansion slot 70 .

In addition, the advantage of the encryption/decryption method of the present invention is that the key of the encryption/decryption engine is not stored in the encryption/decryption chip, but must be sent out from the hidden block 26 of the memory module 20 after the biometric comparison is completed, and the key is hidden. The data in block 26 is even more encrypted using personal biometrics, and cannot be cracked and obtained. In order to further improve the security, the key can also be arbitrarily generated by the software over time.

The biometric identification program can be executed in the terminal host 2. At this time, the biometric identification application program can include the biometric identification program, such as identification and comparison. Alternatively, the biometric identification program can also be executed in the portable storage device 1, as will be described below.

FIG. 5 shows a schematic block diagram of a portable storage device according to a fifth embodiment of the present invention. As shown in Fig. 5, the portable storage device 1 of the present embodiment is similar to the second embodiment, the difference is that the biosensor 30 passes a recognition processor 32 such as a digital signal processor (the processor 32 also includes A flash memory (flash) and a read-only memory (RAM) are connected to the control module 10 as a program memory and a working memory, and the digital signal processor 32 executes a biometric identification program. After the biometric identification procedure is passed, the control module 10 can set the security block 24 of the memory module 20 to be accessible by the terminal host 2, or send a signal to the terminal host 2 to notify the terminal host 2 that the above-mentioned specific operations can be performed. . The identification processor can also be integrated with the control module into a single-chip design. The operation flow of this embodiment is as follows. After the portable storage device 1 is connected to the terminal host 2, the terminal host 2 regards the biometric application block 21 as an optical disc storage device, if the file manager of the operating system of the terminal host 2 is opened, the file manager will A biometric application block 21 is shown which is considered as an optical disk storage device. Therefore, the operating system of the terminal host 2 can automatically execute the biometric application stored in the biometric application block 21 as a foreground program or a background program.

In the case of the foreground program, the terminal host 2 regards the biometric application program block 21 as an optical disk storage device, and automatically executes the biometric identification application program with a man-machine interface to guide the user to use the biometric sensor 30 . The biometric sensor 30 senses the biometric data of the user and sends it to the digital signal processor 32 to identify the biometric data. After the identification is passed, the optical disk storage device disappears, and the security block 24 can be displayed in the file manager of the operating system. The contents of the removable hard disk (for convenience, it is called the D drive) of the

In the case of the background program, after the background program menu is installed, the CD storage device disappears, and the content of the first removable hard disk representing the public block 22 can be displayed in the file manager of the operating system (for convenience) Note, called D disk), and D disk is a storage space that can be freely accessed without biometric identification procedures. Through the call of the background program menu, the biometric application program provides a man-machine interface to guide the user to execute the biometric program, and then the biometric sensor 30 senses the biometric data of the user and sends it to the digital signal processor 32 to perform biometric data identification. After the identification is passed, the content of the second removable hard disk (for convenience of description, referred to as Disk E) of the security block 24 can be displayed in the file manager of the operating system.

It is worth noting that the D drive and E drive under a design structure can coexist in the file manager of the operating system. Under another design structure, only one disk can appear in the file manager of the operating system, that is, the D disk (public block 22) must be closed first and then switched to the E disk (secure block 24), or the D disk Disk (common block 22) must first be closed and then switch to D disk (secure block 24).

Or, in another embodiment of the present invention, the firmware is also designed to divide the memory module 20 into at least one biometric application block 21, at least one public block 22, at least one security block 24 and optional At least one hidden block 26 is displayed, and the information of the public block 22 is displayed after the control module 10 is connected to the terminal host 2, and the specific operation is to make the secret block 24 accessible. The hidden block 26 is designed to store encryption and decryption application key, biometric template and other data. Of course, the hidden block 26 can also be designed to be merged with the biometric application block 21 .

In addition, the removal of the warning message is also the same as the foregoing description, and will not be described in detail here.

FIG. 6 shows a flowchart of a method for automatically executing a biometric identification application according to a sixth embodiment of the present invention. As shown in Figure 6, this method includes the following steps.

Step 500: start.

Step 510: Connect the storage device and the terminal host through the host interface of the storage device.

Step 520: The firmware of the storage device prompts the operating system of the terminal host to regard at least one biometric application program block as an optical disc storage device, and automatically execute at least one biometric identification application program in the optical disc storage device, so as to guide the user to perform identification procedure. This biometric application program is executed in front of the screen, so it is a foreground program.

Step 530: The biometric identification application guides the user to perform the biometric identification procedure.

Step 540 : Determine whether the biometric identification process is successful, if yes, go to step 550 , otherwise, go back to step 530 .

Step 550 : After the biometric authentication procedure is successful, close the biometric authentication application block regarded as the optical disk storage device and enable or enable a specific operation. In this embodiment, the specific operation is to switch to the secure block, that is, to make the operating system view the secure block as a removable hard disk. In another embodiment corresponding to FIG. 4 , the operating system can access the large-capacity storage unit of the storage device as a removable hard disk.

Step S560: end.

It should be noted that all the operation modes and processes of the above-mentioned first to fifth embodiments can be properly applied to this embodiment.

FIG. 7 shows a flowchart of a method for automatically executing a biometric identification application according to a seventh embodiment of the present invention. As shown in Figure 7, this method includes the following steps.

Step 600: start.

Step 610: Connect the storage device and the terminal host through the host interface of the storage device.

Step 620: The firmware of the storage device prompts the operating system of the terminal host to display at least one biometric application block as an optical disk storage device, and automatically execute at least one biometric application to generate a call menu, which can be located in a In the system tray (System Tray), a right mouse button menu or an application menu in the operating system, after the call menu is generated, the biometric application block that will be regarded as an optical disc storage device is closed and a public area appears The content of the block (for convenience, it is called the D drive), and the D drive is a storage space that can be freely accessed without the need for a biometric identification program. In other words, the operating system regards the common block as a removable hard disk. This biometric application is executed behind the scenes, so it is a background program. Then, the biometric application program moves to the front screen for execution according to a call signal from the user, as described below.

Step 630: Detect whether the call menu is called, if yes, skip to step 640, otherwise continue to check whether the background detection menu is called.

Step 640: Present the biometric identification application program to the user to guide the user to perform the identification procedure.

Step 650 : Determine whether the biometric identification process is successful, if yes, go to step 660 , otherwise, go back to step 640 .

Step 660: Enable or start a specific operation after the biometric authentication procedure is successful. In this embodiment, the specific operation is to switch to the secure block, that is, to make the operating system regard the secure block as another removable hard disk. For example, the content of the second removable hard disk (for convenience of description, referred to as disk E) of the security block can be displayed in the file manager of the operating system, or it is still the disk D.

Step S680: end.

It should be noted that all the operation modes and processes of the above-mentioned first to fifth embodiments can be properly applied to this embodiment.

Through the above-mentioned portable storage device 1 of the present invention, the user can take the application programs with him, so that the portable storage device 1 can be applied to various terminal hosts without manual installation of special application programs. The user only needs to perform the plugging and unplugging action of the hardware, and does not need to worry about the software installation at all. At the same time, through the execution of the biometric identification program, the private data in the portable storage device 1 can be effectively protected.

The specific embodiments proposed in the detailed description of the preferred embodiments are only used to facilitate the description of the technical content of the present invention, rather than restricting the present invention to the above-mentioned embodiments in a narrow sense, without departing from the spirit of the present invention and the scope of the claims The situation, the implementation of various changes, all belong to the scope of the present invention.

Claims (59)

1. the portable memory device that can automatically perform biology identification application program is characterized in that, mainly comprises:

One control module, it comprises a microprocessor, a random access memory ram and a read only memory ROM, the working storage of described RAM during as data processing, and described ROM stores the firmware that makes this storage device work, and this control module has a host interface to be electrically connected with an end host;

One biological sensor, it is electrically connected to described control module; And

One memory module, it is electrically connected to described control module by a memory interface,

Firmware that stores in the wherein said control module and described memory module, biology sensor and end host are linked up, and described firmware is designed to:

Described memory module is divided into a plurality of blocks, described block comprises the public block that a biometric application block and that is modeled into the disc storage device is designed to removable formula hard disk at least, and described biometric application block stores at least one biology identification application program; And

In described control module with after described end host is connected, impel an operating system of described end host that described biometric application block is considered as a disc storage device, and automatically perform described at least one biology identification application program and become a backdrop procedure, and call out menu in installation one and close this disc storage device later in this operating system, it is that one first removable formula hard disk comes access that this operating system is considered as described public block.

2. the portable memory device that can automatically perform biology identification application program as claimed in claim 1 is characterized in that, described firmware also is designed to:

Behind described storage device and described end host broken string, impel this operating system of this end host to remove described calling menu automatically.

3. the portable memory device that can automatically perform biology identification application program as claimed in claim 1, it is characterized in that, described firmware and described at least one biology identification application program are designed in order to remove when described disc storage device is closed, from the warning message that described operating system produced.

4. the portable memory device that can automatically perform biology identification application program as claimed in claim 1, it is characterized in that, described block also comprises a secret block, and when described calling menu is called out, described at least one biology identification application program guides a user to carry out a biological identification program, after this biological identification program was passed through, described firmware made described secret block be regarded as one second removable formula hard disk to come access.

5. the portable memory device that can automatically perform biology identification application program as claimed in claim 4, it is characterized in that, after described biological identification program is passed through, described firmware makes described operating system close the described first removable formula hard disk, and described secret block is considered as one second removable formula hard disk comes access.

6. the portable memory device that can automatically perform biology identification application program as claimed in claim 4 is characterized in that, described biological identification program is to carry out in described end host.

7. the portable memory device that can automatically perform biology identification application program as claimed in claim 4 is characterized in that, described biological identification program is to carry out in described portable memory device.

8. the portable memory device that can automatically perform biology identification application program as claimed in claim 7 is characterized in that described biology sensor is connected to described control module by an identification processor, and this identification processor is carried out this biological identification program.

9. the portable memory device that can automatically perform biology identification application program as claimed in claim 4 is characterized in that, described at least one biology identification application program guides the user to carry out the biological identification program in the mode that sound, literal or picture show.

10. the portable memory device that can automatically perform biology identification application program as claimed in claim 1 is characterized in that, described host interface is a USB (universal serial bus), a pcmcia interface, a PCI high-speed interface or an IEEE 1394 interfaces.

11. the portable memory device that can automatically perform biology identification application program as claimed in claim 1, it is characterized in that described memory module is a non-volatility memorizer that is selected from a flash memory, a programmable read only memory, a ROM (read-only memory) or an electricallyerasable ROM (EEROM).

12. the portable memory device that can automatically perform biology identification application program as claimed in claim 1 is characterized in that, also comprises:

One expansion slot is in order to be connected to described control module with an external memorizer that inserts.

13. the portable memory device that can automatically perform biology identification application program as claimed in claim 1 is characterized in that, described biology sensor is a fingerprint sensor, a vocal print sensor, an iris sensor or a shape of face sensor.

14. the portable memory device that can automatically perform biology identification application program as claimed in claim 1 is characterized in that, described calling menu is arranged in the application menu of a system tray, a right mouse button menu or this operating system.

15. the portable memory device that can automatically perform biology identification application program is characterized in that, mainly comprises:

One control module, it comprises a microprocessor, a random access memory ram and a read only memory ROM, the working storage of this RAM during as data processing, and ROM stores the firmware that makes this storage device work, this control module has a host interface to be electrically connected with an end host;

One biological sensor, it is electrically connected to described control module; And

One memory module, it is electrically connected to described control module by a memory interface,

Firmware that stores in the wherein said control module and described memory module, biology sensor and end host are linked up, and described firmware is designed to:

Described memory module is divided into a plurality of blocks, described block comprises a biometric application block and a secret block that is modeled into the disc storage device at least, and described biometric application block stores at least one biology identification application program;

In described control module with after described end host is connected, impel an operating system of described end host that described biometric application block is considered as a disc storage device, and automatically perform described at least one biology identification application program and become a foreground program, carry out a biological identification program with guiding in real time one user; And

When the user by after the biological identification program, described firmware impels described operating system to close described disc storage device, and described secret block is considered as is that a removable formula hard disk comes access.

16. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, described firmware also is designed to:

Behind described storage device and described end host broken string, impel this operating system of described end host to remove at least one biology identification application program in just being performed automatically.

17. the portable memory device that can automatically perform biology identification application program as claimed in claim 15, it is characterized in that, described firmware and described at least one biology identification application program are designed in order to remove when described disc storage device is closed, from the warning message that described operating system produced.

18. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, described biological identification program is carried out in described end host.

19. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, described biological identification program is carried out in described portable memory device.

20. the portable memory device that can automatically perform biology identification application program as claimed in claim 19 is characterized in that described biology sensor is connected to described control module by an identification processor, this identification processor is carried out this biological identification program.

21. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, described host interface is a USB (universal serial bus), a pcmcia interface, a PCI high-speed interface or an IEEE 1394 interfaces.

22. the portable memory device that can automatically perform biology identification application program as claimed in claim 15, it is characterized in that described memory module is a non-volatility memorizer that is selected from a flash memory, a programmable read only memory, a ROM (read-only memory) or an electricallyerasable ROM (EEROM).

23. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, also comprises:

One expansion slot is in order to be connected to described control module with an external memorizer that inserts.

24. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, described biology sensor is a fingerprint sensor, a vocal print sensor, an iris sensor or a shape of face sensor.

25. the portable memory device that can automatically perform biology identification application program as claimed in claim 15 is characterized in that, described at least one biology identification application program guides the user to carry out the biological identification program in the mode that sound, literal or picture show.

26. the portable memory device that can automatically perform biology identification application program is characterized in that, mainly comprises:

One control module, it comprises a microprocessor, a random access memory ram and a read only memory ROM, the working storage of described RAM during as data processing, and described ROM stores the firmware that makes described storage device work, and this control module has a host interface to be electrically connected with an end host;

One biological sensor, it is electrically connected to described control module;

One memory module, it is electrically connected to described control module by a memory interface; And

One high capacity storage element, it is electrically connected to described control module by a storage interface expansion slot and an enciphering/deciphering chip,

Firmware that stores in the wherein said control module and described memory module, biology sensor and end host are linked up, and described firmware is designed to:

Described memory module is divided into a biometric application block that is modeled into the disc storage device at least, and this biometric application block stores at least one biology identification application program;

In described control module with after described end host is connected, impel an operating system of described end host that described biometric application block is considered as a disc storage device, and automatically perform described at least one biology identification application program and become a foreground program to carry out a biological identification program with guiding in real time one user; And

When the user by after the biological identification program, described firmware impels described operating system to close described disc storage device, and described high capacity storage element is considered as is that a removable formula hard disk comes access.

27. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described enciphering/deciphering chip is connected to described control module by a storage interface.

28. the portable memory device that can automatically perform biology identification application program as claimed in claim 26, it is characterized in that described end host comes the described high capacity storage element of access by described enciphering/deciphering chip and the golden key that is stored in the encryption and decryption application program in the described memory module.

29. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described firmware also is designed to:

Behind described storage device and described end host broken string, impel this operating system of described end host to remove this at least one biology identification application program in just being performed automatically.

30. the portable memory device that can automatically perform biology identification application program as claimed in claim 26, it is characterized in that, described firmware and described at least one biology identification application program are designed in order to remove when described disc storage device is closed, from the warning message that described operating system produced.

31. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described biological identification program is carried out in described end host.

32. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described biological identification program is carried out in described portable memory device.

33. the portable memory device that can automatically perform biology identification application program as claimed in claim 32 is characterized in that described biology sensor is connected to described control module by an identification processor, this identification processor is carried out this biological identification program.

34. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described host interface is a USB (universal serial bus), a pcmcia interface, a PCI high-speed interface or an IEEE 1394 interfaces.

35. the portable memory device that can automatically perform biology identification application program as claimed in claim 26, it is characterized in that described memory module is a non-volatility memorizer that is selected from a flash memory, a programmable read only memory, a ROM (read-only memory) or an electricallyerasable ROM (EEROM).

36. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described high capacity storage element is a magnetic hard-disk or an optical disc apparatus.

37. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described biology sensor is a fingerprint sensor, a vocal print sensor, an iris sensor or a shape of face sensor.

38. the portable memory device that can automatically perform biology identification application program as claimed in claim 26 is characterized in that, described at least one biology identification application program guides the user to carry out the biological identification program in the mode that sound, literal or picture show.

39. a method that automatically performs biology identification application program is characterized in that, comprises following steps:

(a) link a storage device and an end host, this storage device has a memory module, and this memory module is split into a plurality of blocks, and described block comprises a biometric application block and a public block that is modeled into the disc storage device;

(b) impel an operating system of described end host that described biometric application block is considered as a disc storage device, and automatically perform at least one biology identification application program that is stored in this biometric application block, call out menu to produce one; And

(c) close described disc storage device, and described public block is considered as one first removable formula hard disk.

40. the method that automatically performs biology identification application program as claimed in claim 39 is characterized in that, also comprises following steps:

Behind described storage device and described end host broken string, remove described calling menu automatically.

41. the method that automatically performs biology identification application program as claimed in claim 39 is characterized in that, also comprises following steps:

Remove when described disc storage device is closed, from the warning message that described operating system produced.

42. the method that automatically performs biology identification application program as claimed in claim 39 is characterized in that, also comprises following steps:

(d) according to the calling of a user to described calling menu, described at least one biology identification application program guides this user to carry out a biological identification program; And

(e) by behind the biological identification program, the secret block in the described block is considered as one second removable formula hard disk comes access.

43. the method that automatically performs biology identification application program as claimed in claim 42 is characterized in that, also comprises following steps:

After by described biological identification program, close the described first removable formula hard disk and switch to the described second removable formula hard disk.

44. the method that automatically performs biology identification application program as claimed in claim 42 is characterized in that, described biological identification program is carried out in described end host.

45. the method that automatically performs biology identification application program as claimed in claim 42 is characterized in that, described biological identification program is carried out in portable memory device.

46. the method that automatically performs biology identification application program as claimed in claim 42 is characterized in that, described step (d) guides the user to carry out the biological identification program in the mode that sound, literal or picture show.

47. the method that automatically performs biology identification application program as claimed in claim 39 is characterized in that, described calling menu is arranged in the application menu of a system tray, a right mouse button menu or described operating system.

48. a method that automatically performs biology identification application program is characterized in that, comprises following steps:

(a) link a storage device and an end host, this storage device has a memory module, and this memory module is split into a plurality of blocks, and described block comprises a biometric application block and a secret block that is modeled into the disc storage device;

(b) impel an operating system of described end host will be at least all one's life thing identification application program block be considered as a disc storage device, and automatically perform at least one biology identification application program that is stored in this biometric application block;

(c) described at least one biology identification application program guides a user to carry out a biological identification program; And

(d) by behind the biological identification program, close described disc storage device, and make described operating system that described secret block is used as a removable formula hard disk to come access.

49. the method that automatically performs biology identification application program as claimed in claim 48 is characterized in that, also comprises following steps:

Behind described storage device and described end host broken string, remove at least one biology identification application program in just being performed automatically.

50. the method that automatically performs biology identification application program as claimed in claim 48 is characterized in that, also comprises following steps:

Remove when described disc storage device is closed, from the warning message that described operating system produced.

51. the method that automatically performs biology identification application program as claimed in claim 48 is characterized in that, described biological identification program is carried out in described end host.

52. the method that automatically performs biology identification application program as claimed in claim 48 is characterized in that, described biological identification program is carried out in portable memory device.

53. the method that automatically performs biology identification application program as claimed in claim 48 is characterized in that, described step (c) guides the user to carry out the biological identification program in the mode that sound, literal or picture show.

54. a method that automatically performs biology identification application program is characterized in that, comprises following steps:

(a) link a storage device and an end host, this storage device has a memory module, this memory module is divided into a biometric application block that is modeled into the disc storage device at least, and this biometric application block stores at least one biology identification application program;

(b) impel an operating system of described end host will be at least all one's life thing identification application program block be considered as a disc storage device, and automatically perform at least one biology identification application program that is stored in this biometric application block;

(c) described at least one biology identification application program guides a user to carry out a biological identification program; And

(d) by behind the biological identification program, close described disc storage device, and make described operating system that one high capacity storage element of described storage device is considered as a removable formula hard disk to come access.

55. the method that automatically performs biology identification application program as claimed in claim 54 is characterized in that, also comprises following steps:

Behind described storage device and described end host broken string, remove the described at least one biology identification application program in just being performed automatically.

56. the method that automatically performs biology identification application program as claimed in claim 54 is characterized in that, also comprises following steps:

Remove when described disc storage device is closed, from the warning message that described operating system produced.

57. the method that automatically performs biology identification application program as claimed in claim 54 is characterized in that, described biological identification program is carried out in described end host.

58. the method that automatically performs biology identification application program as claimed in claim 54 is characterized in that, described biological identification program is carried out in portable memory device.

59. the method that automatically performs biology identification application program as claimed in claim 54 is characterized in that, described step (c) guides the user to carry out the biological identification program in the mode that sound, literal or picture show.

Images