税控USB终端设备安全过滤器的设计与实现

Design and Implementation of Tax Control USB Terminal Device Security Filter

摘要:

为了防止不法分子在USB设备与电脑连接时植入非法程序，从而窃取电脑中的敏感信息或控制电脑向外设发出非法指令，本文针对USB-key的接入安全问题，提出了建立黑、白名单的方案。传统的USB-key安全防范措施都是基于加密认证，未考虑税控机接入的USB设备安全性。因此，本文提出对接入的USB设备进行分类，并对不同类别的USB设备执行相应的处理方案。通过设计开发针对税控系统的硬件检测设备和软件控制程序，从物理层面对接入税控机的USB设备进行安全检测。文中给出了USB设备过滤器的硬件设计图和软件控制程序的流程图，并对几种有代表性的设备进行了测试。测试结果表明，该设备能够对USB设备合法性进行有效的检测，并对违规的USB设备做出相应的处理，提高了税控系统USB-key接入USB设备的安全性。

Abstract:

In order to prevent lawless persons from planting illegal programs when USB devices are connected with computers, and stealing sensitive information in the computer or controlling the computer to issue illegal instructions to peripherals, this paper proposes a plan to create black and white lists for USB-key access security. Traditional USB-key security precautions are based on encryption authentication, without considering the security of USB devices connected to the tax control machine. Therefore, this paper proposes to classify the connected USB devices and implement corresponding processing schemes for different types of USB devices. Through the design and development of the hardware detection equipment and software control program for the tax control system, the security detection is carried out from the physical layer to the USB device connected to the tax control machine. The hardware design drawing and software control program flow chart of USB device filter are given, and several representative devices are tested. The test results show that the device can effectively detect the legitimacy of USB devices and deal with the illegal USB devices, which improves the security of USB-key access to USB devices in the tax control system.