A secure control protocol for USB mass storage devices

The Universal Serial Bus (USB) has become the most popular interface standard for hardware connection, and there has been an explosion in the number of USB peripheral devices. External USB storage devices, in particular, are finding widespread application. Unfortunately, because USB affords high transmission speeds and is extremely convenient, many workplaces and businesses have prohibited the use of USB devices to prevent confidential data from being extracted from computer systems via USB ports. However, this compromises the convenience of the USB connection and demonstrates a lack of flexibility in management. Therefore, finding a way to take the considerations of both convenience and management into account has become a significant issue. This study proposes a secure control protocol which provides mutual authentication and key agreement between client and server to solve this problem.