USB storage device security access control method based on thin virtual machine monitor

The invention relates to a USB storage device security access control method based on a thin virtual machine monitor. The key steps of I/ O interception of the USB device are proposed by analyzing data flow, which is achieved by simulation in BitVisor, in a BULK-ONLY protocol of the USB storage device. According to the method, by analyzing the implementing principle of a USB main controller in the BitVisor, identification, read and write operations of a special device are intercepted based on access authority owned by the device, and therefore the purpose of security access control is achieved. Meanwhile, based on the implement of the thin virtual machine monitor BitVisor, the security access control of the USB storage device is transparent to an operating system, and the security does not depend on the security of the operating system; moreover, compared to Xen and other virtual machine monitors, the thin virtual machine monitor BitVisor is smaller in volume, and higher in security and reliability, so that t