机器特征码

在计算机硬件设备中 CPU ID、BIOS、主板、内存、硬盘、卷SN，网卡MAC地址可作为机器特征码，通过硬件检测工具如everest可以看到这一点。

 

CPU ID

cpu id并不具备唯一性，同一批号的cpu其id可能相同

1、WMI

SELECT ProcessorId FROM Win32_Processor

 

2、API

貌似没有相关win32 api可以用于获取CPU ID的

 

3、ASM

http://devpinoy.org/blogs/cvega/archive/2006/04/07/2658.aspx

 

BIOS SN

1、WMI

SELECT SerialNumber FROM Win32_BIOS

基本上是返回“0000000000”

 

2、API

没有找到相关api

 

3、ASM

没有找到C#相关

 

主板 SN

1、WMI

SELECT SerialNumber FROM Win32_BaseBoard

基本上返回空

 

2、API

没有找到相关API

 

3、ASM

没有找到C#相关

 

内存 SN

1、WMI

SELECT SerialNumber FROM Win32_PhysicalMemory

基本上返回空

 

2、API

没有找到相关API

 

3、ASM

没有找到C#相关

 

硬盘 SN

SCSI硬盘据说是没有ID的

 1、WMI

SELECT SerialNumber FROM Win32_PhysicalMedia

对SATA硬盘无效

 

2、API

DeviceIoControl 这是一个复杂的函数，以下是一个摘自网络可以直接调用的cs

using System;using System.Collections.Generic;using System.Text;using System.Runtime.InteropServices;namespace HardDiskSN{ public class IDE { [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Ansi)] internal struct IDSECTOR { public ushort wGenConfig; public ushort wNumCyls; public ushort wReserved; public ushort wNumHeads; public ushort wBytesPerTrack; public ushort wBytesPerSector; public ushort wSectorsPerTrack; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 3)] public ushort[] wVendorUnique; [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 20)] public string sSerialNumber; public ushort wBufferType; public ushort wBufferSize; public ushort wECCSize; [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 8)] public string sFirmwareRev; [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 40)] public string sModelNumber; public ushort wMoreVendorUnique; public ushort wDoubleWordIO; public ushort wCapabilities; public ushort wReserved1; public ushort wPIOTiming; public ushort wDMATiming; public ushort wBS; public ushort wNumCurrentCyls; public ushort wNumCurrentHeads; public ushort wNumCurrentSectorsPerTrack; public uint ulCurrentSectorCapacity; public ushort wMultSectorStuff; public uint ulTotalAddressableSectors; public ushort wSingleWordDMA; public ushort wMultiWordDMA; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 128)] public byte[] bReserved; } [StructLayout(LayoutKind.Sequential)] internal struct DRIVERSTATUS { public byte bDriverError; public byte bIDEStatus; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 2)] public byte[] bReserved; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 2)] public uint[] dwReserved; } [StructLayout(LayoutKind.Sequential)] internal struct SENDCMDOUTPARAMS { public uint cBufferSize; public DRIVERSTATUS DriverStatus; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 513)] public byte[] bBuffer; } [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Ansi)] internal struct SRB_IO_CONTROL { public uint HeaderLength; [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 8)] public string Signature; public uint Timeout; public uint ControlCode; public uint ReturnCode; public uint Length; } [StructLayout(LayoutKind.Sequential)] internal struct IDEREGS { public byte bFeaturesReg; public byte bSectorCountReg; public byte bSectorNumberReg; public byte bCylLowReg; public byte bCylHighReg; public byte bDriveHeadReg; public byte bCommandReg; public byte bReserved; } [StructLayout(LayoutKind.Sequential)] internal struct SENDCMDINPARAMS { public uint cBufferSize; public IDEREGS irDriveRegs; public byte bDriveNumber; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 3)] public byte[] bReserved; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 4)] public uint[] dwReserved; public byte bBuffer; } [StructLayout(LayoutKind.Sequential)] internal struct GETVERSIONOUTPARAMS { public byte bVersion; public byte bRevision; public byte bReserved; public byte bIDEDeviceMap; public uint fCapabilities; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 4)] public uint[] dwReserved; // For future use. } [DllImport("kernel32.dll")] private static extern int CloseHandle(uint hObject); [DllImport("kernel32.dll")] private static extern int DeviceIoControl(uint hDevice, uint dwIoControlCode, ref SENDCMDINPARAMS lpInBuffer, int nInBufferSize, ref SENDCMDOUTPARAMS lpOutBuffer, int nOutBufferSize, ref uint lpbytesReturned, int lpOverlapped); [DllImport("kernel32.dll")] private static extern int DeviceIoControl(uint hDevice, uint dwIoControlCode, int lpInBuffer, int nInBufferSize, ref GETVERSIONOUTPARAMS lpOutBuffer, int nOutBufferSize, ref uint lpbytesReturned, int lpOverlapped); [DllImport("kernel32.dll")] private static extern uint CreateFile(string lpFileName, uint dwDesiredAccess, uint dwShareMode, int lpSecurityAttributes, uint dwCreationDisposition, uint dwFlagsAndAttributes, int hTemplateFile); private const uint GENERIC_READ = 0x80000000; private const uint GENERIC_WRITE = 0x40000000; private const uint FILE_SHARE_READ = 0x00000001; private const uint FILE_SHARE_WRITE = 0x00000002; private const uint OPEN_EXISTING = 3; private const uint INVALID_HANDLE_VALUE = 0xffffffff; private const uint DFP_GET_VERSION = 0x00074080; private const int IDE_ATAPI_IDENTIFY = 0xA1; // Returns ID sector for ATAPI. private const int IDE_ATA_IDENTIFY = 0xEC; // Returns ID sector for ATA. private const int IDENTIFY_BUFFER_SIZE = 512; private const uint DFP_RECEIVE_DRIVE_DATA = 0x0007c088; public static string Read(byte drive) { OperatingSystem os = Environment.OSVersion; if (os.Platform != PlatformID.Win32NT) throw new NotSupportedException("仅支持WindowsNT/2000/XP"); //我没有NT4，请哪位大大测试一下NT4下能不能用 //if (os.Version.Major < 5) throw new NotSupportedException("仅支持WindowsNT/2000/XP"); string driveName = "////.//PhysicalDrive" + drive.ToString(); uint device = CreateFile(driveName, GENERIC_READ | GENERIC_WRITE, FILE_SHARE_READ | FILE_SHARE_WRITE, 0, OPEN_EXISTING, 0, 0); if (device == INVALID_HANDLE_VALUE) return ""; GETVERSIONOUTPARAMS verPara = new GETVERSIONOUTPARAMS(); uint bytRv = 0; if (0 != DeviceIoControl(device, DFP_GET_VERSION, 0, 0, ref verPara, Marshal.SizeOf(verPara), ref bytRv, 0)) { if (verPara.bIDEDeviceMap > 0) { byte bIDCmd = (byte)(((verPara.bIDEDeviceMap >> drive & 0x10) != 0) ? IDE_ATAPI_IDENTIFY : IDE_ATA_IDENTIFY); SENDCMDINPARAMS scip = new SENDCMDINPARAMS(); SENDCMDOUTPARAMS scop = new SENDCMDOUTPARAMS(); scip.cBufferSize = IDENTIFY_BUFFER_SIZE; scip.irDriveRegs.bFeaturesReg = 0; scip.irDriveRegs.bSectorCountReg = 1; scip.irDriveRegs.bCylLowReg = 0; scip.irDriveRegs.bCylHighReg = 0; scip.irDriveRegs.bDriveHeadReg = (byte)(0xA0 | ((drive & 1) << 4)); scip.irDriveRegs.bCommandReg = bIDCmd; scip.bDriveNumber = drive; if (0 != DeviceIoControl(device, DFP_RECEIVE_DRIVE_DATA, ref scip, Marshal.SizeOf(scip), ref scop, Marshal.SizeOf(scop), ref bytRv, 0)) { StringBuilder s = new StringBuilder(); for (int i = 20; i < 40; i += 2) { s.Append((char)(scop.bBuffer[i + 1])); s.Append((char)scop.bBuffer[i]); } CloseHandle(device); return s.ToString().Trim(); } } } CloseHandle(device); return ""; } }}  

 

3、使用DLL

提取硬盘ID动态链接库 V2.00

 

卷 ID

由Format命令生成，Ghost可复制，同时也存在卷ID修改软件

1、WMI

SELECT VolumeSerialNumber FROM Win32_LogicalDisk

 

2、API

GetVolumeInformation

uint vsn = 0; uint maxLen = 0; FileSystemFeature flags; //使用全参数访问不存在的盘符时会产生异常，而仅返回卷sn则不会 API.GetVolumeInformation("c://", null, 0, out vsn, out maxLen, out flags, null, 0); //转换为十六进制显示 Trace.WriteLine(string.Format("{0:x}", vsn));

 

网卡 MAC

获取MAC的方法有很多，常规方法如WMI、API、COM、NetWorkInterface类等，请参考“网卡MAC地址修改”一章，网卡的MAC地址是可以伪造的，要获取固件中的MAC地址，应使用DeviceIoControl API

以下是摘自网络的一个可以直接调用的css

using System;using System.Collections.Generic;using System.Text;using System.Runtime.InteropServices;namespace HardDiskSN{ class MAC { [DllImport("kernel32.dll", SetLastError = true)] public static extern bool DeviceIoControl( IntPtr HDevice, uint dwIoControlCode, IntPtr lpInBuffer, uint nInBufferSize, IntPtr lpOutBuffer, uint nOutBufferSize, ref uint lpBytesReturned, IntPtr lpOverlapped); [DllImport("kernel32.dll", SetLastError = true)] [return: MarshalAs(UnmanagedType.Bool)] public static extern bool CloseHandle(IntPtr hObject); [DllImport("kernel32.dll", SetLastError = true)] public static extern IntPtr CreateFile( string lpFileName, uint dwDesiredAccess, uint dwShareMode, IntPtr lpSecurityAttributes, uint dwCreationDisposition, uint dwFlagsAndAttributes, IntPtr hTemplateFile); public static string GetNicAddress(string NicId) { System.IntPtr hDevice = CreateFile("////.//" + NicId, 0x80000000 | 0x40000000, 0, IntPtr.Zero, 3, 4, IntPtr.Zero ); if (hDevice.ToInt32() == -1) { return null; } uint Len = 0; IntPtr Buffer = Marshal.AllocHGlobal(256); Marshal.WriteInt32(Buffer, 0x01010101); if (!DeviceIoControl(hDevice, 0x170002, Buffer, 4, Buffer, 256, ref Len, IntPtr.Zero)) { Marshal.FreeHGlobal(Buffer); CloseHandle(hDevice); return null; } byte[] macBytes = new byte[6]; Marshal.Copy(Buffer, macBytes, 0, 6); Marshal.FreeHGlobal(Buffer); CloseHandle(hDevice); return new System.Net.NetworkInformation.PhysicalAddress(macBytes).ToString(); } }}

可以以NetWorkInterface类的id属性调用GetNicAddress

 

注意： 

 

硬件的ID也好SN也好，甚至包括网卡的MAC并不是绝对具备的或可读取的，不同的硬件产商可能有不同的作法，因此在处理硬件特征码时应作好空判断及异常捕获

 

DeviceIoConstrol是可以被Hook的

 

可以考虑用其它信息，如硬件的GUID、DeviceID等作为特征

 

推荐使用CPUID+硬盘SN+卷SN+网卡固件MAC作为机器特征码，并对组成作最底限制，如必须有某些特，否则生成的相应特征码是不安全的

 

 参考资料:

C#获取电脑硬件信息（CPU ID、主板ID、硬盘ID、BIOS编号）说明
http://blog.csdn.net/docflying/archive/2009/04/27/4128146.aspx

 

获取网卡MAC、硬盘序列号、CPU ID、BIOS编号
http://www.lihuasoft.net/article/show.php?id=2830

 

C#取机器码
http://www.cnblogs.com/easydata/archive/2007/09/10/888592.html

 

C#应用：读取指定盘符的硬盘序列号
http://www.wangchao.net.cn/bbsdetail_546503.html

 

C#读硬盘序列号的原代码
http://www.chenjiliang.com/Article/View.aspx?ArticleID=2058

 

C#代码获取网卡地址
http://www.cnblogs.com/osoft1983/archive/2008/12/10/1351678.html

 

C#实现启用、禁用本地网络的三种方式
http://blog.csdn.net/zjfei/archive/2009/04/23/4104660.aspx