税控USB终端设备安全过滤器的设计与实现  

Design and Implementation of Tax Control USB Terminal Device Security Filter

作　　者：王磊[1] 宋军 彭铭 张晓航 Wang Lei;Song Jun;Peng Ming;Zhang Xiaohang(School of Computer Science and Technology,Henan Polytechnic University,Jiaozuo 454000,China;Venus tech Company,Zhengzhou 450000,China;Henan College of Industry&Information Technology,Jiaozuo 454000,China)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454000 [2]启明星辰公司,郑州450000 [3]河南工业和信息化职业学院,河南焦作454000

出　　处：《计算机测量与控制》2020年第9期202-205,211,共5页Computer Measurement &Control

基　　金：河南省重点科技攻关项目(192102210123,182102110333)。

摘　　要：为了防止不法分子在USB设备与电脑连接时植入非法程序,从而窃取电脑中的敏感信息或控制电脑向外设发出非法指令,文章针对USB-key的接入安全问题,提出了建立黑、白名单的方案;传统的USB-key安全防范措施都是基于加密认证,未考虑税控机接入的USB设备安全性;因此,文章提出对接入的USB设备进行分类,并对不同类别的USB设备执行相应的处理方案;通过设计开发针对税控系统的硬件检测设备和软件控制程序,从物理层面对接入税控机的USB设备进行安全检测;文中给出了USB设备过滤器的硬件设计图和软件控制程序的流程图,并对几种有代表性的设备进行了测试;测试结果表明,该设备能够对USB设备合法性进行有效的检测,并对违规的USB设备做出相应的处理,提高了税控系统USB-key接入USB设备的安全性。In order to prevent lawless persons from planting illegal programs when USB devices are connected with computers,and stealing sensitive information in the computer or controlling the computer to issue illegal instructions to peripherals,this paper proposes a plan to create black and white lists for USB-key access security.Traditional USB-key security precautions are based on encryption authentication,without considering the security of USB devices connected to the tax control machine.Therefore,this paper proposes to classify the connected USB devices and implement corresponding processing schemes for different types of USB devices.Through the design and development of the hardware detection equipment and software control program for the tax control system,the security detection is carried out from the physical layer to the USB device connected to the tax control machine.The hardware design drawing and software control program flow chart of USB device filter are given,and several representative devices are tested.The test results show that the device can effectively detect the legitimacy of USB devices and deal with the illegal USB devices,which improves the security of USB-key access to USB devices in the tax control system.

关 键 词：安全检测 设备过滤 USB-KEY 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]