Method and system for secure data access among two devices

1. A method performed on an electronic device for secure data access, comprising:

retrieving unique information of the electronic device and a storage device directly from the electronic device and the storage device;

generating an encryption key for encrypting a password string according to the unique information of the electronic device and the storage device;

randomly generating a password for securing a data file;

encrypting a password string, which contains the randomly generated password, with the encryption key;

locking and storing the data file together with the encrypted password string in the storage device;

unlocking the data file secured with the password in response to a request for accessing the data file by a requesting device, comprising:

generating a decryption key according to the unique information corresponding to a requesting device and the storage device;

decrypting the encrypted password string to obtain a decrypted password by the decryption key; and

unlocking the data file by verifying the decrypted password.

2. The method of claim 1 , wherein the step of encrypting the password string further comprises:

randomly generating a data string; and

scattering the password and the data string into the password string according to a predetermined algorithm.

3. The method of claim 1 , further comprising:

compressing the data file with at least partial bits of the password string.

4. A data security system, comprising:

a processing unit, configured to process a data file and retrieve unique information of the processing unit and the storage device directly from the processing unit and the storage device, the processing unit comprising:

a key generator, configured to generate an encryption key for encrypting a password string according to the unique information of the storage device and the processing unit;

a password generator, configured to generate a password string containing a randomly generated password for locking the data file, and encrypt the password string containing the randomly generated password according to the encryption key; and

a storage unit, configured to store the data file and the encrypted password string;

wherein the data file is locked with the encrypted password string and stored in the storage device;

wherein the processing unit further comprises a data access interface unit configured to receive a request for accessing the data file, the data file secured with the password being unlocked in response to a request for accessing the data file by a requesting device, the processing unit generating a decryption key according to the unique information corresponding to a requesting device and the storage device, decrypting the encrypted password string to obtain a decrypted password by the decryption key, and unlocking the data file by verifying the decrypted password.

5. The data security system of claim 4 , wherein the password string is generated from the password and a data string according to a predefine algorithm.

6. The data security system of claim 5 , wherein the password and the data string are generated in random, and the predefined algorithm is a scatter algorithm.

7. The data security system of claim 4 , wherein the processing unit is a mobile device, and the storage unit is one of the following: internal storage of the mobile device, external storage device connected to the mobile device, SD memory card, micro SD memory card; and wherein the unique information is selected from one of the following: ID number, serial number, IMEI number, MAC address.

8. The data security system of claim 4 , wherein the key generator and the password generator are executed in a secure domain within the processing unit.

9. The data security system of claim 4 , wherein the processing unit is further configured to compress the data file prior to storing in the storage unit.

10. A method for secure data access, comprising:

receiving a request, by a processing unit, for accessing a secured data file stored in a storage unit;

retrieving unique information of the processing unit and the storage unit directly from the processing unit and the storage unit respectively;

generating a decryption key for unlocking the secured data file according to the unique information of a requesting device, the processing unit, and the storage unit;

unlocking the secured data file according to the decryption key; and

permitting access to the secured data file according to the unlock result;

wherein the step of unlocking the secured data file comprises:

decrypting an encrypted password string stored together with the secured data file by the decryption key; and

obtaining a randomly generated password from the decrypted password string according to a predetermined algorithm;

verifying the randomly generated password for access the secured data file.

11. The method of claim 10 , wherein the step of unlocking the secured data file further comprises decompressing the secured data file.

12. The method of claim 10 , wherein in response to the randomly generated password being verified as successful, permitting the processing unit to access the secured data file.

13. The method of claim 10 , wherein in response to the randomly generated password being verified as failed, locking the secured data file from accessing.