Abstract: Aiming at the deficiency of present secure solutions countering USB-based Hardware Trojan Horse, BadUSB, bus wiretapping and other new attack technologies, a secure connection scheme applying to any USB device was proposed. In scheme, mutual authentication and key exchange were implemented by extending the standard device request in the hub driver and USB device framework driver to prevent the creation of malicious USB connection. Meanwhile, all the data transferred of the created USB connection would be filter encrypted by USB bus driver and USB device framework driver to rebel the monitor of bus. The experiment results show that the proposed scheme can be used to build secure sealing USB connection for an information system, solving the secure threats introduced by USB interface.

Key words: USB, hardware trojan, BadUSB, wiretapping attack, hub, driver