JP2000250818A - Storage system, storage device and stored data protecting method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a storage system capable of accessing a recording medium for enciphering and storing data with simple operation while reducing the change to an existent device. SOLUTION: Concerning this stored data protecting method, when a memory card 1 is mounted on an access device 2 and the access device 2 is activated, a driver for certification is read out of a storage part 11 by the access device 2 and a password is acquired and enciphered. When the enciphered password is coincident with an enciphering password in the storage part 11 and further enciphered fixed data in the storage part 11 express the same fixed data as fixed data stored in the access device 2, the memory card 1 and the access device 2 are mutually certified. When the certification is made successful, the access device 2 deciphers the general data read out of the storage part 11 through a controller 12, enciphers the data of a recording object and writes them in the storage part 11.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a storage system using a recording medium, a storage device, and a storage data protection method, and more particularly, to a storage system for encrypting and storing data.
The present invention relates to a storage device and a storage data protection method.

[0002]

2. Description of the Related Art Hard disk drives, MOs (Magneto-Optical disks), and flash memories are used as recording media that can be accessed (read / write / erase data) by a computer or the like. These recording media are
It is used for storing data and transferring data between multiple computers. Conventionally, in order to protect data recorded on these recording media from unauthorized access, the data has been conventionally stored after being encrypted.

[0003]

However, in order to access a recording medium in which data is encrypted and stored, it is necessary to decrypt the data. For this reason, a computer or the like that accesses such a recording medium needs to execute a program every time the recording medium is exchanged in order to enable decoding of data stored in all recording media owned by the user. Re-install or
It is necessary to previously store a program necessary for decoding data stored in each recording medium owned by the user.

[0004] Accordingly, operations for managing and accessing a computer or the like become complicated, and a program for decryption hinders efficient use of a storage area of an external storage device such as a hard disk device.

[0005] The present invention has been made in view of the above situation, and there is little change to be made to an existing device, and access to a recording medium for encrypting and storing data can be performed by processing with a simple operation. It is an object to provide a storage system, a storage device, and a storage data protection method.

[0006]

In order to achieve the above object, a storage system according to a first aspect of the present invention comprises a recording medium and an access device, and the recording medium stores encrypted information. Storage means for storing encrypted data representing the encrypted data and a process for encrypting the data and decrypting the encrypted data, wherein the access device obtains the encrypted processing program from the recording medium. Acquiring means, executing the encryption processing program acquired by the program acquisition means, acquiring the decryption data from the recording medium and decrypting the encrypted data, and executing the encryption processing program acquired by the program acquisition means By encrypting the information to be stored in the recording medium to generate the encrypted data, And means for storing a over data on the recording medium, and characterized in that.

[0007] According to such a storage system, the access device reads and executes the encryption processing program to decrypt the encryption data, generate the encryption data, and store the encryption data in the recording medium. Therefore, management and operation of the access device are simplified. Also, existing computers function as access devices without substantial changes.

A recording medium controller connected to the recording medium and detachably attached to the access device, wherein the recording medium controller transmits the encryption code from the recording medium in accordance with a read instruction supplied from the access device. Read control means for acquiring data and supplying the data to the access device, and acquiring the encrypted data generated by the access device from the access device in accordance with a write instruction supplied from the access device, and storing the encrypted data in the recording medium Writing control means, wherein the access device supplies the read instruction to the read control means, acquires the encrypted data supplied by the read control means, and transmits the write instruction to the write control means. Supply means. Thereby, processing for accessing the recording medium is shared by the access device and the recording medium controller, and the processing load on the access device is reduced.

The access device encrypts the password and generates an encrypted password by executing a process represented by an encryption processing program acquired by the program acquisition unit and a means for acquiring a password in accordance with an operation of an operator. Means for supplying the encrypted password to the recording medium controller, wherein the recording medium controller transmits the encrypted password to the recording medium by the access device based on the encrypted password supplied from the access device. Deciding means for deciding whether or not to permit access; wherein the read control means comprises means for refusing to comply with the read instruction when the deciding means decides not to permit the access; Means when the determining means determines that the access is not permitted It may be provided with means for rejecting to follow the writing instruction. Thus, the authentication of the operator and the authentication of the recording medium are performed before the access device accesses the recording medium. As a result,
Unauthorized access to the recording medium is prevented.

[0010] A storage system according to a second aspect of the present invention includes a recording medium, an access device, and a recording medium controller connected to the recording medium and detachably mounted on the access device. Wherein the recording medium stores encrypted data representing encrypted information, and a means for storing an encryption processing program representing a process of performing data encryption and decryption of the encrypted data. A program acquisition unit that acquires the encryption processing program from the recording medium, and acquires the encryption data from the recording medium in accordance with a read instruction supplied from the access device, and executes the encryption processing program acquired by the program acquisition unit. Read control means for decrypting the encrypted data by executing and supplying the decrypted data to the access device; The information to be stored in the recording medium, which is supplied by the access device, is acquired from the access device, and the program acquiring means executes the acquired cryptographic processing program to encrypt the information and generate the encrypted data. Writing control means for storing the generated encrypted data in the recording medium, wherein the access device supplies the read instruction to the read control means, and the read control means supplies the read instruction to the read control means. It is characterized by comprising: means for acquiring encrypted data; and means for supplying information to be stored in the recording medium.

According to such a storage system, the recording medium controller reads and executes the encryption processing program, thereby decrypting the encrypted data, generating the encrypted data, and storing the encrypted data in the recording medium. Therefore, management and operation of the access device are simplified. Also, existing computers function as access devices without substantial changes.

The recording medium controller encrypts the password by executing a process represented by an encryption processing program acquired by the program acquiring unit according to means for acquiring a password in accordance with an operation of an operator, and thereby encrypts the password. Generating means for determining whether or not to permit access to the recording medium by the access device based on the encrypted password, the read control means comprising: When determining not to permit, comprising means for refusing to comply with the read instruction, the write control means, when the determination means determines not to permit the access,
The information processing apparatus may include means for rejecting acquisition of information to be stored in the recording medium from the access device. Thus, the authentication of the operator and the authentication of the recording medium are performed before the access device accesses the recording medium. As a result, unauthorized access to the recording medium is prevented.

[0013] A storage device according to a third aspect of the present invention is a storage device including a recording medium and a recording medium controller, wherein the recording medium stores encrypted data representing encrypted information. Means for storing and storing an encryption processing program representing a process of encrypting data and decrypting the encrypted data, wherein the recording medium controller comprises:
A program acquisition unit that is detachably attached to an external access device, acquires the encryption processing program from the recording medium, and reads out the recording medium from the recording medium according to a read instruction supplied from the external access device. Reading control means for obtaining encrypted data, decrypting the encrypted data by executing the encryption processing program obtained by the program obtaining means and supplying the decrypted data to the external access device, and supplying the external access device; The information to be stored in the recording medium is obtained from the external access device, and the program obtaining means executes the obtained encryption processing program to encrypt the information to generate the encrypted data. Writing control means for storing data in the recording medium;
It is characterized by having.

According to such a storage device, the external access device reads and executes the encryption processing program, thereby decrypting the encrypted data, generating the encrypted data, and storing the encrypted data in the recording medium. Therefore, management and operation of the external access device are simplified. Also, existing computers function as external access devices without substantial changes.

[0015] The recording medium controller encrypts the password by executing means represented by an encryption processing program acquired by the program acquiring means, in accordance with an operation of an operator, and encrypts the password to generate an encrypted password. Generating means for determining whether or not to permit access to the recording medium by the external access device based on the encrypted password, the read control means comprising: Means for refusing to comply with the read instruction when it is determined that access is not permitted, wherein the write control means stores information to be stored in the recording medium when the determination means determines that access is not permitted. May be provided with a means for refusing to obtain from the external access device. There. Thus, the authentication of the operator and the authentication of the recording medium are performed before the access device accesses the recording medium. As a result, unauthorized access to the recording medium is prevented.

A storage device according to a fourth aspect of the present invention is a storage device including a recording medium and a recording medium controller, wherein the recording medium stores encrypted data representing encrypted information. Means for storing and storing an encryption processing program representing a process of encrypting data and decrypting the encrypted data, wherein the recording medium controller comprises:
A program supply unit that is detachably attached to an external access device that acquires and executes the encryption processing program, and that causes the external access device to acquire the encryption processing program stored in the recording medium; In accordance with a read instruction supplied from the external access device, a read control unit that acquires the encrypted data from the recording medium and supplies the encrypted data to the external access device, and a target that the external access device stores in the recording medium. Write control means for acquiring the encrypted data generated by encrypting the information from the external access device and storing the encrypted data in the recording medium.

According to such a storage device, the recording medium controller reads and executes the encryption processing program to decrypt the encrypted data, generate the encrypted data, and store the encrypted data in the recording medium. Therefore, management and operation of the external access device are simplified. Also, existing computers function as external access devices without substantial changes.

The recording medium controller obtains an encrypted password generated by the external access device encrypting the password according to the encryption processing program, and, based on the obtained encrypted password,
Deciding means for deciding whether or not to permit access to the recording medium by the external access device, wherein the read control means follows the read instruction when the deciding means decides not to permit the access. Means for refusing to obtain the encrypted data from the external access device when the deciding means decides not to permit the access. You may. Thus, the authentication of the operator and the authentication of the recording medium are performed before the access device accesses the recording medium. As a result, unauthorized access to the recording medium is prevented.

Also, a storage data protection method according to a fifth aspect of the present invention comprises a storage step and an access step, wherein the storage step stores encrypted data representing encrypted information, A step of storing an encryption processing program representing a process of performing encryption and decryption of the encrypted data, wherein the access step includes: a program acquisition step of acquiring the encryption processing program from the storage step; and Executing the obtained encryption processing program to obtain and decrypt the encrypted data from the storage step, and executing the obtained encryption processing program in the program obtaining step to store the encrypted data in the storage step. Generates the encrypted data by encrypting the target information, There comprising the steps of storing the generated the encrypted data in the storage step, and wherein the.

According to such a storage data protection method,
The access step executes the encryption processing program to decrypt the encrypted data, generate the encrypted data, and store the encrypted data in the storage step. Therefore, management and operation of an external device that needs access to the encrypted data is simplified. Further, the existing computer acquires the encrypted data decrypted by the access step or causes the access step to store the encrypted data in the storage step without any substantial change.

[0021]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described.
A memory card system that accesses a memory card having a flash memory will be described as an example with reference to the drawings.

FIG. 1 is a block diagram showing a physical configuration of a memory card system according to an embodiment of the present invention. 1, the memory card system includes a memory card 1 and an access device 2. The memory card 1 is connected via a slot provided in the access device 2 to
It is detachably attached to the access device 2.

The memory card 1 includes a storage unit 11 and a controller 12. Storage unit 11 and controller 12
Are connected to each other.

The storage unit 11 stores, for example, an EEPROM (El
ectrically Erasable / ProgramableRead Only Memory)
Etc. are provided. The storage unit 11 responds to the access performed by the controller 12, stores the data supplied from the access device 2, supplies the stored data to the access device 2, and erases the stored data. .

The storage area of the storage unit 11 is, for example,
As shown in FIG. 2, there are 8192 pages, each of which has a storage capacity of 528 bytes. Pages are continuously assigned page addresses from 0 to 8191, and memory cells included in each page are successively assigned addresses from 0 to 527.

Each page is 1 in units of 16 pages from the top.
Make up one block. Each block has a storage capacity of 8 kilobytes, the entire storage area is composed of 512 blocks, and physical block addresses from 0 to 511 are continuously provided from the beginning.

As shown, each page has a data area occupying an area of 512 bytes from the beginning,
And a redundant part occupying 6 bytes. Original data (data supplied and written from the access device 2 and data to be supplied to the access device 2) are stored in the data area, and the contents of the original data are destroyed in the redundant portion. An error check code or the like for confirming that there is no error is stored.

The value of the logical block address assigned to the block is stored in the redundant portion of each page belonging to each block. The logical block address is a unit recognized by the controller 12 as a data read / write unit when the storage unit 11 is read / written by an operation described later. The total amount of blocks to which logical block addresses are assigned is a predetermined amount smaller than the total amount of blocks physically provided in the storage unit 11, for example, 500 blocks.

When the storage unit 11 is instructed by the controller 12 of the memory card 1 to erase data of a specific block, the storage contents of all the memory cells included in the block are reset (for example, the storage unit). When 11 is a NAND flash memory, the storage value of each memory cell is "1".

As shown in FIG. 2, a predetermined number of blocks from the beginning of the blocks constituting the storage area of the storage section 11 form a card-specific information storage area, and the other blocks are general data storage areas. Form an area.

The storage contents of the card-specific information storage area cannot be substantially updated by external access. Therefore, the access device 2 and the controller 12 are substantially prohibited from updating the content of the information stored in the storage unit 11.

The card-specific information storage area previously stores encrypted boot information, an encryption key, an authentication driver, an encrypted password, and encrypted fixed data by the manufacturer of the memory card 1 or the like.

The encrypted boot information is obtained by encrypting boot information, which is data including parameters indicating the size and structure of the storage area of the storage unit 11 and parameters specifying the data read / write method and speed, using an encryption key. It is a thing.

The encryption key is used by the access device 2 to perform a later-described process of decrypting later-described general data stored in the general data storage area. The encryption key is also used by the access device 2 to perform a process described below for encrypting data to be stored as general data in the general data storage area. The authentication driver is program data representing the above-described processing in which the access device 2 uses the encryption key to decrypt general data and encrypt data.

An encrypted password is a password used to authenticate whether or not a user of the memory card system is a legitimate user in an initial process described later executed by the memory card system, using an encryption key. It is encrypted. The encrypted fixed data is obtained by encrypting predetermined fixed data stored in the access device 2 using an encryption key. The encrypted fixed data is used in the above-described initial processing to authenticate whether or not the memory card 1 is properly manufactured.

In the general data storage area, the access device 2
Of the program data representing the processing executed by the access device 2 and general data including data referred to in the processing executed by the access device 2 are stored. However, the general data is stored in an encrypted state using the encryption key stored in the card-specific information storage area. And the encrypted general data is
After being read by the access device 2, it is decrypted by the access device 2 using the encryption key.

As shown in FIG. 1, the controller 12
CPU (Central Processing Unit) 121 and ROM
(Read Only Memory) 122 and SRAM (Static Ran)
domAccess Memory) 123. CPU 12
1 is connected to the ROM 122, the SRAM 123, and the storage unit 11, and includes a PCM included in the access device 2.
It is detachably connected to the access device 2 via a CIA slot.

The CPU 121 performs the processing described below according to the processing of a program stored in the ROM 122 in advance by the manufacturer of the controller 12 or the like. And C
When acquiring the command supplied from the access device 2, the PU 121 executes the command. The instructions executed by the CPU 121 include an instruction to access the storage unit 11. The ROM 122 stores in advance program data representing the above-described processing executed by the CPU 121 by the manufacturer of the controller 12 or the like.

The SRAM 123 is used as a work area of the CPU 121, and has a BSI (Block Search Index) and a BP created by the CPU 121 through processing described later.
T (Block Pointer Table) is stored.

The BSI stores information indicating which of the blocks in the storage unit 11 is an empty block (that is, a block in a reset state). BSI
Is created in accordance with a process described later of the controller 12, and is stored in the SRAM 123.

FIG. 3 shows an example of the structure of the BSI when the total number of blocks in the storage unit 11 is 512. As shown in the figure, the BSI is composed of 64 bytes of data.
Corresponding to "1", "1" is stored when the corresponding block is a free block, and "0" is stored when the corresponding block is not a free block.

The BPT stores information indicating a correspondence relationship between a logical block address and a physical block address, which will be described later. Each time a BSI is generated, it is created in accordance with a process described later and stored in the SRAM 123. BP
T occupies a predetermined logical position in the storage area of the SRAM 123, and has a storage area for storing a physical block address associated with each logical block address.

Specifically, the BPT has a data structure shown in FIG. 4, for example. That is, for example, when the total number of logical block addresses is 500, as shown in FIG.
000h to 11F3h, and has a storage area of 500 words in total.

Each address assigned to the storage area forming the BPT is a logical block address and a BP.
It is equal to the sum of the minimum value (offset value) of the address assigned to the storage area forming T. The content stored in the one-word storage area to which each address is assigned indicates the physical block address of the block associated with the logical block address indicated by the address.

More specifically, for example, as shown in FIG. 4, the value “005A” is stored in the storage area assigned the address 1001h.
h "is stored. In this case, if the offset value is 1000h, the physical block address is 005.
A block of Ah is associated with 0001h as a logical block address.

However, when the content stored in the storage area to which each address is assigned represents a predetermined value (for example, as shown, a value “07FFh” is shown).
Indicates that the physical block address is not associated with the logical block address indicated by the address of the storage area storing the value.

The access device 2 has a slot as described above. This slot is, for example, a PCMCIA slot for relaying a PCMCIA bus. The access device 2 stores an OS and program data representing an access driver, and executes the OS after power-on. When it is detected that the memory card 1 is inserted in the slot, the authentication driver is read from the memory card 1 and activated according to the processing of the OS.

The access device 2 that performs the processing of the authentication driver reads the encryption key and the encrypted boot information from the memory card 1 and restores the boot information by decrypting the encrypted boot information using the read encryption key. I do. Then, the access device 2 that performs the processing of the authentication driver calls the access driver and transfers the restored boot information to the processing of the access driver.

The access device 2 that performs the processing of the access driver supplies the above-described command to the controller 12 or supplies data to be written to the storage unit 11, and transmits the data to the storage unit 11 to the controller 12. Make writing occur. Then, the controller 12 obtains from the controller 12 the data read from the storage unit 11 and supplied to itself according to the command supplied by itself. That is,
The access device 2 is connected to the storage unit 1 via the controller 12.
1 is accessed.

The access device 2 has an input means for receiving a password from the user according to the operation of the user, and stores the above-mentioned fixed data.
The fixed data need not be specially created for the above-described purpose, and may be any data stored in the access device 2 for properly configuring the memory card system. Any part of the OS program may be used.

(Operation) Next, the operation of the memory card system will be described with reference to FIG. FIG. 5 is a flowchart showing the initial processing.

(Initial Processing) When the access device 2 is started with the memory card 1 inserted in the slot of the access device 2 and the access device 2 starts executing the OS, this memory card system is shown in FIG. Perform initial processing.

When the initial processing is started, first, the CPU 121 of the controller 12 of the memory card 1
The authentication driver is read from the card-specific information storage area of (1) and supplied to the access device 2 (step S101).
When supplied with the authentication driver, the access device 2 executes a process represented by the authentication driver.

The access device 2 does not need to store the authentication driver supplied thereto in a non-volatile storage area. For example, the access device 2 includes a CPU and a RAM.
(Random Access Memory), it is sufficient to store it in the storage area of the RAM.

When the processing of the authentication driver is started, the access device 2 waits for the user to operate the access device 2 and supply a password to itself (step S1).
02). When the password is supplied, the storage unit 1
The encryption key is read from the first card unique information storage area, the password supplied thereto is encrypted using the encryption key, and the encrypted password is supplied to the CPU 121 (step S103).

When the CPU 121 receives the encrypted password, the CPU 121 reads the encrypted password from the card-specific information storage area of the storage unit 11, and reads the encrypted password from the encryption password supplied from the access device 2. It is determined whether or not the password is substantially the same as the converted password (step S104).

If it is determined that they do not match, a message indicating authentication failure is supplied to the access device 2 (step S105). The access device 2 to which the message has been supplied terminates the initial processing on the assumption that the normal memory card 1 is not mounted in its own slot. After completion of the initial processing, when the access device 2 detects that the memory card 1 is inserted again, the memory card system executes the initial processing from step S101.

On the other hand, if it is determined that they match, the CPU 12
1 reads out the encrypted fixed data from the card-specific information storage area and supplies it to the access device 2 (step S1).
06). Upon receiving the encrypted fixed data, the access device 2 decrypts the encrypted fixed data (Step S
107), it is determined whether or not the stored data substantially matches the fixed data stored therein (step S108).

If it is determined that they do not match, the access device 2 terminates the initial processing assuming that the normal memory card 1 is not installed in its own slot. If it is determined that they match, the CPU 121 is notified of the success of the authentication (step S109).

When notified of the success of the authentication, the CPU 121 stores the BPT and BS in the storage area of the SRAM 123.
Initialization of the part storing I (step S11)
0).

In step S110, CPU 121
Specifically, BP in the storage area of the SRAM 123 is
For the part storing T, a predetermined value (for example, the above-mentioned value “07FFh”) indicating that the physical block address is not associated with each section indicated by the above-mentioned address given for each word is assigned. Write. Also, BS
The logical values of the bits storing I are all “0”.

Next, the CPU 121 specifies a block from which the logical block address has not been read yet among the blocks in the storage unit 11 and which has the smallest physical block address, and specifies a page belonging to the specified block. The logical block address is read from the redundant part (step S111).

Then, the CPU 121 assigns an address corresponding to the logical block address read from the storage unit 11 in the storage area of the SRAM 123 for storing the BPT to a physical address of the block from which the logical block address is read. The block address is written (step S112). As a result, new information indicating the association between the physical block address and the logical block address is added to the BPT.

Next, the CPU 121 proceeds to step S111
It is determined whether or not the block from which the logical block address was read last is an empty block (step S11).
3). Specifically, it is determined whether or not a free block code of a predetermined format is stored in the redundant portion of the page belonging to the block from which the logical block address was read last in step S111.

When determining that the block is not an empty block, the CPU 121 shifts the processing to step S115.
On the other hand, if it is determined that the block is an empty block, the CPU 121
Calculates the position of the bit indicating the physical block address in the storage area of the SRAM 123 for storing the BSI from the physical block address indicating the empty block, and rewrites the logical value of the bit to “1” (step (S114), the process proceeds to step S115.

In step S115, the CPU 121 determines whether or not there is a block next to the block from which the logical block address has been read in step S111. If it is determined that there is a block, the process returns to step S111. If it is determined that the file does not exist, the initial processing is terminated normally. Through the initial processing described above, the mutual authentication between the memory card 1 and the access device 2 and the reading of the encrypted boot information by the access device 2 are performed, and the CPU 121 creates the BSI and the BPT.

(Process of Reading General Data) Step S
After the normal end of the initial processing in 115, the CPU 121 of the memory card 1 receives an instruction to access the storage unit 11 from the access device 2. Access device 2
When the CPU 121 instructs the CPU 121 to read general data from the storage unit 11, the CPU 121 supplies the CPU 121 with a command for instructing reading of general data and information specifying a storage area from which general data is to be read.

The information for specifying the storage area from which the general data is to be read is, for example, the storage unit 11.
CHS (Cylinder-Head-) that represents each partition when a virtual storage area of a size corresponding to the size of the storage area of
Sector) format information is used. The access device 2 may obtain the size of the storage area of the storage unit 11 from the boot information obtained by itself, for example.

However, the format of the information for designating the storage area from which the general data is to be read is arbitrary. For example, a virtual storage area having a size corresponding to the size of the storage area of the storage unit 11 is set to 512 bytes. The serial number when divided into sections and each section is assigned a serial number starting from 0, that is, LBA
(Logic Block Address) information may be used.

An instruction for reading general data;
The CPU 121 supplied with the information for specifying the storage area from which the general data is to be read converts the information for specifying the storage area to create information represented as (A) and (B) below.

That is, the CPU 121 determines (A) information indicating which logical block address is assigned to a block in the storage area of the storage unit 11 corresponding to the specified storage area, and (B) If the specified storage area is
(A) and information indicating the position of the page in the block represented by the information of (A).
Note that the number of blocks indicated by the information (A) is not limited to one, and the number of pages indicated by the information (B) is not limited to one.

Next, the CPU 121 searches the BPT for a physical block address associated with the logical block address indicated by the information (A). Then, based on the retrieved physical block address and the information of (B) above, the page to be read is specified, and general data is read from the page.

The read general data is stored in the access device 2
Supplied to The access device 2 passes the general data supplied thereto to the processing of the authentication driver, and instructs the authentication driver to decrypt the general data. The access device 2 that executes the authentication driver performs step S of the initial process.
Using the encryption key read in 103, the general data supplied to itself is decrypted, and the decrypted general data is transferred to the processing that supplied the general data to itself (that is, the processing of the access driver). By the processing described above, the encrypted general data is read from the storage unit 11 and decrypted.

(Data Write Processing) After the normal end of the initial processing, the access device 2
When instructing the writing of data into the device, first, the data to be written is transferred to the processing of the authentication driver, and the encryption of the data is instructed. The access device 2 that executes the authentication driver encrypts the data using the encryption key read in step S103, and transfers the encrypted write target data to the process that supplied the general data to itself.

The access device 2 is connected to the CPU 121
In addition, encrypted data to be written, an instruction to write general data to the storage unit 11 by the method indicated by the boot information acquired by itself, information to specify a storage area to write data to, and Supply.

CPU supplied with a command to instruct data writing, encrypted data to be written, and information specifying a storage area to which data is to be written.
Reference numeral 121 converts the information for specifying the storage area to create the above-described information (A) and (B). And CPU1
21 searches the BSI to find out the physical block addresses of empty blocks equal to the number of blocks indicated by the information (A).

Next, the CPU 121 searches the BPT for a physical block address associated with the logical block address indicated by the information (A). Then, the pages belonging to the respective blocks to which the physical block addresses found by the BPT are added are indicated by the page indicated by the information (B) (the applicable page) and the other pages (the non-applicable pages).
Classified as

However, if there is no physical block address associated with the logical block address indicated by the information (A), the CPU 121 sends the block indicated by the physical block address retrieved from the BSI to the access device 2. The supplied write target data is written.
Then, the CPU 121 changes the contents of the BSI so that the changed contents of the BSI do not indicate that the block in which the data is written is an empty block. Also, C
The PU 121 writes the physical block address of the block in which the new data has been written into the storage area in the BPT in which information indicating that the physical block address is not associated is written. Then, when the change of the contents of the BSI and the BPT is completed, the process ends.

On the other hand, when there is a physical block address associated with the logical block address indicated by the information (A), the CPU 121 determines the block indicated by the searched physical block address and the information indicated by the information (A). Are associated with each other on a one-to-one basis. And (A)
The content stored in the page belonging to each block indicated by the information is transferred to the page having the same order from the top among the blocks associated with the block. However, the content of the page classified as the page to be written is not transcribed, and instead of the content of the page, the data to be written supplied from the access device 2 should be written to the page to be written. Write the supplied part.

The CPU 121 resets the block associated with the empty block each time data writing to each empty block retrieved from the BSI is completed, and sets the redundancy of the page belonging to the reset block. Write an empty block code to the section.

Then, the CPU 121 accesses the BPT, and in the changed BPT, overwrites the storage area storing the physical block address of the reset block with the physical block address of the block for which writing has been completed. Thus, the logical block address previously associated with the reset block is associated with the newly written block. Also, C
The PU 121 also accesses the BSI so that the content of the changed BSI does not indicate that the block for which writing has been completed is an empty block, and indicates that the reset block is an empty block.

Then, the CPU 121 writes the data into all the empty blocks retrieved from the BSI,
When the change of the BSI and the BPT is completed, the writing process ends. By the processing described above, the data supplied from the access device 2 is stored in the storage unit 11 in an encrypted state. Further, the content of the BSI is changed so as to indicate a free block newly generated as a result of data writing and a free block that has disappeared. On the other hand, the content of the BPT is also changed, and the logical block address assigned to the newly vacant block is newly assigned to the block to which the previously recorded data has been transcribed.

(Data Erasure Processing) When erasing the data stored in the storage unit 11 collectively for each data stored in the same block, the access device 2 instructs the data erasure. And a logical block address indicating a block containing data to be erased, to the CPU 121.

When supplied with a command for instructing data erasure and a logical block address indicating a block containing data to be erased, the CPU 121 changes the physical block address associated with the logical block address. , From the BPT. Then, the CPU 121
The block indicated by the found physical block address is reset, and an empty block code is written in a redundant portion of a page belonging to the reset block.

Next, the CPU 121 changes the contents of the BSI stored in the SRAM 123, and
Is set to indicate that the reset block is an empty block, and the process ends.

By the above-described processing, the data stored in the storage unit 11 is erased in units of blocks, and information indicating an empty block newly generated as a result of the erasure is added to the BSI. When erasing data stored in an arbitrary range of storage area that is not necessarily represented in units of blocks,
What is necessary is just to perform the above-described data write processing without performing any write operation on the place where the data supplied from the access device 2 is to be written.

The configuration of the memory card 1 is not limited to the one described above. For example, the storage unit 11 has an EEPROM
The storage device is not limited to this, and may include any type of storage device. Further, the storage capacity of the storage unit 11 and the data structure of the storage area are not limited to those described above. For example, the logical position occupied by the card-specific information storage area in the storage area of the storage unit 11 may be changed at any time. In this case, for example, the storage unit 11 or the controller 12 supplies the information indicating the logical position of the card-specific information storage area to the access device 2 before the process of step S101 of the initial process, and the access device 2 is supplied with the information. The logical position indicated by the information may be accessed.

The processing of the authentication driver does not need to be performed by the access device 2, and may be performed by, for example, the CPU 121 of the controller 12. In this case, immediately after the access device 2 is started up with the memory card inserted, for example, the access device 2 instructs the CPU 121 to start the initial processing, and the CPU 121 responds to the instruction to execute the authentication driver program. What is necessary is just to read out from the storage unit 11 and execute the processing of the authentication driver.

When the processing of the authentication driver is performed by the CPU 121, the CPU 121 replaces the notification of the success of the authentication in step S109, and normally terminates the initial processing in the processing of step S115. May be performed. In this case, after notifying the end of the initial processing to the access device 2, the CPU 121 reads the storage unit 11 from the access device 2.
What is necessary is just to accept the instruction of access to.

The processing of the authentication driver is executed by the CPU 12.
1, the CPU 121 may decode the general data read from the storage unit and supply it to the access device 2. Also, in this case, the access device 2
CPU1 without encrypting the data to be stored in
21 to be stored in the storage unit 11 after the CPU 121 encrypts the data.

When the authentication device fails in the initial process, the access device 2 that performs the process of the authentication driver determines whether or not the number of failed authentications has reached a predetermined number. After that, the initial processing may not be restarted even if the installation of the memory card 1 is newly detected. When the processing of the authentication driver is performed by the CPU 121, even if it is determined that the number of authentication failures in the initial processing has reached a predetermined number, even if the access device 2 instructs the start of the initial processing, the initial processing is not performed. May be rejected.

Further, this memory card system stores the password supplied to the access device 2 by the user's operation regardless of whether the authentication based on the password is successful. Information indicating whether or not the password was successful or information indicating the time at which the password was supplied may be stored. This makes it possible to refer to the access time, the password input at that time, and the like when an unauthorized user attempts access.

Further, in this memory card system, when access to general data stored in the storage unit 11 that satisfies predetermined conditions is instructed from the access device 2 to the memory card 1, the access is performed. In order to determine whether or not to permit, the user may be further authenticated.

More specifically, for example, the storage unit 11 stores the encrypted re-authentication password unique to the user and the object to which access should be permitted when the authentication using the re-authentication password succeeds. Re-authentication target designation data indicating general data is stored. Then, when there is an instruction to access general data from the access device 2, the CPU 121 determines whether or not the general data to be accessed corresponds to the data indicated by the re-authentication target designation data. When it is determined that it is applicable, the access device 2 or C
The PU 121 waits for the user to operate the access device 2 to input the re-authentication password, and encrypts the input re-authentication password using the encryption key read in step S103. Then, it is determined whether or not the encrypted re-authentication password matches the encrypted re-authentication password stored in the storage unit 11 in advance.
If it is determined that they match, the CPU 121 accesses the general data specified by the access device 2 as an access target.

The embodiments of the present invention have been described above. However, the storage system of the present invention can be realized using an ordinary computer system without using a dedicated system. For example, by installing the program from a medium (a floppy disk, a CD-ROM, or the like) storing a program for executing the operation of the access device 2 into a personal computer having a slot for mounting the memory card 1, A storage system that executes the above processing can be configured.

The medium for supplying the program to the computer may be a communication medium (a medium that temporarily and fluidly stores the program, such as a communication line, a communication network, or a communication system). For example, the program may be posted on a bulletin board (BBS) of a communication network and distributed via the network. Then, by starting this program and executing it in the same manner as other application programs under the control of the OS, the above-described processing can be executed.

When the OS shares a part of the processing,
Alternatively, when the OS constitutes a part of one component of the present invention, a program excluding the part may be stored in the recording medium. Also in this case, in the present invention, it is assumed that the recording medium stores a program for executing each function or step executed by the computer.

[0098]

As described above, according to the present invention, it is possible to access a recording medium for encrypting and storing data with a simple operation with few changes to existing devices. A system, a storage device, and a storage data protection method are realized.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a memory card system according to an embodiment of the present invention.

FIG. 2 is a diagram schematically illustrating a logical structure of a storage area of a storage unit.

FIG. 3 is a diagram schematically illustrating a data structure of a BSI.

FIG. 4 is a diagram illustrating an example of a configuration of a BPT.

FIG. 5 is a flowchart showing an initial process.

[Explanation of symbols]

 Reference Signs List 1 memory card 11 storage unit 12 controller 121 CPU 122 ROM 123 SRAM 2 access device

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B017 AA01 BA05 BA07 BB02 BB08 CA07 CA09 CA12 CA14 CA16 5B035 AA13 BB09 CA38 CA39

Claims (10)

[Claims] 1. An encryption device comprising: a recording medium; and an access device, wherein the recording medium stores encrypted data representing encrypted information, and performs encryption of data and decryption of the encrypted data. A storage unit for storing a processing program, wherein the access device obtains the encryption processing program from the recording medium, and executes the encryption processing program obtained by the program obtaining unit to execute the encryption processing program. Means for acquiring and decrypting the encrypted data, and executing the encryption processing program acquired by the program acquiring means, thereby encrypting information to be stored in the recording medium to generate the encrypted data, Storing the encrypted data generated by the storage medium in the recording medium. 2. A recording medium controller connected to the recording medium and detachably attached to the access device, wherein the recording medium controller is configured to read from the recording medium in accordance with a read instruction supplied from the access device. A read control unit that acquires the encrypted data and supplies the encrypted data to the access device, according to a write instruction supplied from the access device,
Write control means for acquiring the encrypted data generated by the access device from the access device and storing the encrypted data in the recording medium, wherein the access device supplies the read instruction to the read control unit and performs the read operation. 2. The storage system according to claim 1, further comprising: a unit configured to acquire the encrypted data supplied by a control unit, and a unit configured to supply the write instruction to the write control unit. 3. 3. An access device according to claim 1, wherein said access device obtains a password in accordance with an operation of an operator, and executes a process represented by an encryption processing program obtained by said program obtaining means, thereby encrypting said password to generate an encrypted password. And a means for supplying the encrypted password to the recording medium controller. The recording medium controller, based on the encrypted password supplied from the access device, the recording medium by the access device Deciding means for deciding whether or not to permit access to the apparatus, wherein the read control means comprises means for refusing to comply with the read instruction when the deciding means decides not to permit the access, The writing control unit has determined that the determining unit does not permit the access. Come, the storage system according to claim 2 comprising means for rejecting to follow the writing instruction, it is characterized. 4. A recording medium comprising: a recording medium; an access device; and a recording medium controller connected to the recording medium and detachably attached to the access device, wherein the recording medium represents encrypted information. Means for storing encrypted data and storing an encryption processing program representing a process of encrypting data and decrypting the encrypted data, wherein the recording medium controller acquires the encryption processing program from the recording medium Acquiring means for acquiring the encrypted data from the recording medium according to a read instruction supplied from the access device, and executing the encryption processing program acquired by the program acquiring means to decrypt the encrypted data and execute the access. Reading control means for supplying to the device; and The information to be stored is obtained from the access device, and the program obtaining means executes the obtained encryption processing program to encrypt the information to generate the encrypted data, and stores the generated encrypted data in the recording medium. Writing control means for storing, the access device supplies the read instruction to the read control means, and acquires the decrypted encrypted data supplied by the read control means; and the recording medium Means for supplying information to be stored in the storage system. 5. The storage medium controller encrypts the password by executing a process represented by an encryption processing program acquired by the program acquisition unit, the unit acquiring a password in accordance with an operation of an operator. Determining means for generating a password and determining whether to permit access to the recording medium by the access device based on the encrypted password;
Wherein the read control means includes means for refusing to comply with the read instruction when the determination means determines that the access is not permitted, and wherein the write control means does not permit the access by the determination means. 5. The storage system according to claim 4, further comprising: a unit that refuses to acquire information to be stored in the recording medium from the access device when the determination is made. 6. A storage device comprising a recording medium and a recording medium controller, wherein the recording medium stores encrypted data representing encrypted information, encrypts the data, and decrypts the encrypted data. Means for storing an encryption processing program representing processing for performing encryption, wherein the recording medium controller is removably mounted on an external access device, and acquires the encryption processing program from the recording medium. Acquiring means for acquiring the encrypted data from the recording medium according to a read instruction supplied from the external access device, and decrypting the encrypted data by executing the encryption processing program acquired by the program acquiring means. Read control means for supplying to the external access device; Obtaining information to be stored in a recording medium from the external access device, executing the encryption processing program obtained by the program obtaining means, encrypting the information to generate the encrypted data, and generating the encrypted data. And writing control means for storing the information in the recording medium. 7. The storage medium controller encrypts the password by executing a process represented by an encryption processing program acquired by the program acquisition unit, the unit acquiring a password according to an operation of an operator. Determining means for generating a password and determining, based on the encrypted password, whether to permit access to the recording medium by the external access device, the read control means comprising: Means for refusing to comply with the read instruction when it is determined that the access is not permitted, and wherein the write control means stores the information in the recording medium when the determination means determines that the access is not permitted. Means for refusing to obtain the above information from the external access device. Memory device according to claim 6,. 8. A storage device comprising a recording medium and a recording medium controller, wherein the recording medium stores encrypted data representing encrypted information, encrypts the data, and decrypts the encrypted data. Means for storing an encryption processing program representing processing for performing encryption, wherein the recording medium controller is detachably attached to an external access device that acquires and executes the encryption processing program, and A program supply unit for causing the external access device to acquire the encryption processing program stored in a medium, and acquiring the encrypted data from the recording medium in accordance with a read instruction supplied from the external access device, and obtaining the external access Reading control means for supplying the information to a device, and the external access device encrypts information to be stored in the recording medium. It turned into the encrypted data generated and a write control means for storing in the recording medium acquired from the external access device, a storage device, characterized in that. 9. The recording medium controller acquires an encrypted password generated by the external access device encrypting a password according to the encryption processing program, and, based on the acquired encrypted password,
Deciding means for deciding whether to permit access to the recording medium by the external access device, wherein the read control means follows the read instruction when the deciding means decides not to permit the access. Means for refusing to obtain the encrypted data from the external access device when the deciding means decides not to permit the access, The storage device according to claim 8, wherein: 10. An encryption method comprising: a storage step; and an access step, wherein the storage step stores encrypted data representing encrypted information, and performs encryption of data and decryption of the encrypted data. A step of storing the processing program, wherein the accessing step comprises: a program obtaining step of obtaining the cryptographic processing program from the storing step; and executing the cryptographic processing program obtained by the program obtaining step. A step of acquiring and decrypting the encrypted data; and executing the encryption processing program acquired by the program acquiring step, thereby encrypting information to be stored in the storage step to generate the encrypted data,
Storing the encrypted data generated by the storage device in the storage step.