Usb peripheral authentication method, embedded system, and storage medium

An embedded system, characterized by comprising:

• a security unit configured to provide a secure authentication environment for a USB device;
• a storage unit configured to store ID information of the embedded system;
• a random number generator configured to generate a salt value;
• and
• a processor configured to handle data interaction during authentication of the USB device, the processor calling the security unit, the storage unit, and the random number generator to perform the USB peripheral authentication method;
• verifying an identity of a user and accessing a USB device authentication credential generation program for a legitimate user;
• acquiring ID information of a USB device, ID information of the embedded system, and a salt value generated by a random number generator;
• associating the ID information of the USB device, the ID Information of the embedded system, and the salt value generated by the random number generator through the security unit, and using same as an input for generating a key pair and issuing a self-signed certificate;
• inserting the ID information of the USB device, the ID information of the embedded system, the salt value, and the key pair in a storage area of the security unit, and returning the self-signed certificate and the salt value to the USB device or the user;
• when the USB device is accessed, verifying whether the self-signed certificate and the salt value of the USB device or the user match the information in the storage area of the security unit;
• if yes, activating a USB communication function;
• otherwise, disabling the communication function of the USB device.

A storage medium, characterized in that the storage medium has a computer program stored thereon, and the computer program, when executed by a processor, implements the USB peripheral authentication method:

• verifying an identity of a user and accessing a USB device authentication credential generation program for a legitimate user;
• acquiring ID information of a USB device, ID information of the embedded system, and a salt value generated by a random number generator;
• associating the ID information of the USB device, the ID information of the embedded system, and the salt value generated by the random number generator through the security unit, and using same as an input for generating a key pair and issuing a self-signed certificate;
• inserting the ID information of the USB device, the ID information of the embedded system, the salt value, and the key pair in a storage area of the security unit, and returning the self-signed certificate and the salt value to the USB device or the user;
• when the USB device is accessed, verifying whether the self-signed certificate and the salt value of the USB device or the user match the information in the storage area of the security unit;
• if yes, activating a USB communication function;
• otherwise, disabling the communication function of the USB device.