基于arm9嵌入式系统的u盘文件加解密系统实现-软件工程专业论文.docxVIP

I I 摘 要 摘 要 针对目前 USB 移动存储设备在数据安全中存在的漏洞，本文提出了一种新的 USB 存储设备数据安全解决方案。本系统通过 USB 接口连接于计算机与 USB 存储设 备之间，对计算机和 USB 设备之间传输的数据进行解析，利用指纹模块提供的稳 定密钥加密并转发 USB 数据。实现文件加密、文件名不加密的效果，使得 U 盘中 普通文件与加密文件可以共存，多个用户可以共同使用一块 U 盘而无需担心数据 泄露。设备具有相对计算机、USB 存储设备独立的特点，无需对两者做任何改动， 保证了对普通 U 盘的支持。 本文选用 AT91SAM9260 作为实现平台，针对嵌入式核心板设计了外接电路， 提供了 USB 的主从接口、RS232 串口、面向指纹模块的 SPI 接口。不使用操作系统， 移植了 USB 海量存储协议的主机和从机驱动。上电启动时，使用 bootstrap 直接 加载应用程序，并跳转执行。主从驱动协同工作，并添加对 FAT32 文件系统的识 别，使系统对文件名透明传输的同时对文件数据加密。加密算法采用 AES 标准、 CBC 分组模式，采用 32 位快速 AES 算法。另外，核心板空余的 32M 内存被用来缓 存 USB 数据，对同一数据的再次访问可以直接从内存获取。最后通过 SPI 接口同 指纹模块连接。在 USB 全速设备的基础上，通过优化软件，读写分别可以达到 550KB/s 和 230KB/s 的传输速度。 关键词：USB 协议，FAT32 文件系统 ，文件加密， AES-CBC，AT91SAM9260 II II ABSTRACT ABSTRACT As the threat exists in the storage protection of the present USB Mass Storage Device, this article proposes a new method to provide them with security services. All of the packets will be processed when they go through this system, which connects PC and USB Mass Storage Device. Before forwarding them to the USB device, these packets will be chosen to be encrypted using the key provided by the fingerprint module. As a result, when be directly connected, the disk will be found normal with all the directories correctly shown while the contents of certain file are obfuscated. Thus it becomes possible that in such disk coexist the plaintext and the ciphertext and that multi people share one disk without worrying about the privacy. This system is not only relatively independent to the computer and USB Device, but compatible with various USB Memory Devices without any update to PC or USB Device. On the platform of AT91SAM9260, this article designed the extension circuit equipping the core-board with various ports, such as USB HOSTDEVICE port, RS232 and the SPI to fingerprint module. After startup, the system runs directly the Bootstrap which would load the application mainly consisting of the two drivers, USB MSD Host Driver and Device Driver, without any operating systems. With the