JP2005062975A - Storage device, its control method, and control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a storage device improved in usability of a legal user while maximally maintaining security against illicit access from a third person. <P>SOLUTION: It is determined whether user authentication was successful or not between a disk device related to installation and a main body in the past. When user authentication has been successful in the past, access to a magnetic disk inside the disk device via the main body is allowed even if a user ID and a password are not inputted as user authentication data. If user authentication has not been successful in the past, access to the magnetic disk inside the disk device via the main body is allowed on condition that the user ID and the password registered previously in the disk device are inputted. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a storage device that can be attached to and detached from a main body device such as an information processing device, a control method thereof, and a control program.
[0002]
[Prior art]
In recent years, a storage device having a security function for preventing stored content from being illegally accessed by a third party has been proposed.
[0003]
For example, there is a user authentication technology that prevents unauthorized access by requesting input of a password when accessing content and granting access only when the password associated with the input matches a preset password. Are known.
[0004]
In addition, passwords and anti-blurring techniques that prevent passwords from malicious third parties and passwords by activating a predetermined protection function when a counter that counts password input errors reaches a predetermined value have been proposed (for example, Patent Document 1).
[0005]
In particular, in the case of a portable storage device, it is assumed that the storage device may be lost during movement, so the security function as described above is important.
[0006]
[Patent Document 1]
JP 2000-259276 A
[0007]
[Problems to be solved by the invention]
However, when the user authentication function is provided in the storage device as in the above-described prior art, there are cases where the usability of a legitimate user is sacrificed.
[0008]
For example, even a legitimate user must enter a password each time the storage device is used. In addition, since the password is not clearly remembered, the above-described password and the anti-blurring function are activated while inputting several conceivable passwords, and even a legitimate user cannot access the password.
[0009]
The present invention has been made to solve the above-mentioned problems, and the problem is that a storage device that improves the usability of a legitimate user while maintaining security against unauthorized access from a third party, and a control method thereof And providing a control program.
[0010]
[Means for Solving the Problems]
In order to solve the above-described problems, a storage device according to the present invention is a storage device that is detachable from a main device, and a user who accesses the storage device from the main device based on user authentication information input from the main device. A user authenticating unit for authenticating; a determining unit for determining whether or not user authentication by the user authenticating unit has been successful in the past in the main unit; and a user of the user authenticating unit based on a determination result of the determining unit And a criterion determining means for determining a criterion for authentication.
[0011]
The storage device control method of the present invention is a storage device control method that is detachable from the main device, and a user who accesses the storage device from the main device based on user authentication information input from the main device. Based on the determination result of the determination step, the determination step of determining whether or not the user authentication by the user authentication step has succeeded in the past in the main unit, and the user authentication step And a criterion determination step for determining a criterion for user authentication.
[0012]
Further, the control program of the present invention is a control program for a storage device that is detachable from the main body device, and the user who accesses the storage device from the main body device based on user authentication information input from the main body device. A user authentication process to be authenticated; a determination process to determine whether or not user authentication by the user authentication process has succeeded in the past in the main unit; and a user of the user authentication process based on a determination result of the determination process And a standard determination process for determining a criterion for determination of authentication.
[0013]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0014]
In the present embodiment, a case where the present invention is applied to a hard disk storage device (hereinafter simply referred to as a disk device) will be described as an example of the storage device of the present invention.
[0015]
[First Embodiment]
The disk device according to the first embodiment has a function for authenticating a user, and determines whether or not user authentication has been successful in the past in the main body device to which the present disk device is mounted. In this case, the user authentication judgment criteria are relaxed by permitting access to the disk device via the main unit without requiring input of user authentication information (user ID, password).
[0016]
This is used by a legitimate user if a user authentication has been successful in the past when a portable or replaceable disk device having a user authentication function is mounted on the main device. This is based on the idea that importance should be placed on reducing the operation burden on the user rather than the security function.
[0017]
FIG. 1 is a block diagram showing a schematic configuration of a disk device in the first and second embodiments.
[0018]
The disk device 100 is mounted in a slot (not shown) of the main body device 111 so as to be hot-plugged. When the disk device 100 is mounted on the main device 111, power is supplied from the main device 111 to the disk device 100 via an ATA (AT Attachment) interface 102 (which may be another general-purpose disk interface). The operation of the disk device 100 is started.
[0019]
Here, the main device 111 is a general-purpose information device such as a personal computer, for example, and a device driver 112 that controls the disk device 100 by a command or the like conforming to the ATA standard based on a request from an upper layer, a disk device Software components such as a file system driver 113 that handles the content stored in the file 100 as a file and an application 114 that uses the content file are operating.
[0020]
The main unit 111 may be a device other than general-purpose information devices, for example, an information device for a specific purpose such as a filing device, a copying device, or a printing device.
[0021]
The CPU 101 of the disk device 100 controls the entire disk device 100. The interface control unit 103 performs interface control with the main body device 111. The data control unit 104 controls various commands, data input / output, and the like exchanged with the main device 111. The data buffer 105 is a memory for temporarily storing data exchanged with the main device 111.
[0022]
The recording / reproducing control unit 106 performs data recording / reproducing control so as to access the magnetic disk 108 via a magnetic head (not shown). The mechanism control unit 107 controls a mechanism drive system such as a voice coil motor (not shown) for driving a magnetic head (not shown) and a spindle motor (not shown) for rotating the magnetic disk 108. The work RAM 109 stores variables and the like necessary when the CPU 101 executes the control program.
[0023]
The flash memory 110 stores data that should be retained even when the power is turned off, such as a control program executed by the CPU 101 and disk registration information. When writing the disk registration information to the flash memory 110, the number of times of rewriting is managed in a predetermined block unit based on the characteristics of the rewriting life of the flash memory 110, and the block whose number of times of rewriting has reached a predetermined upper limit value. In this case, memory control is performed in which alternative empty blocks are sequentially used.
[0024]
Here, the disk registration information is various kinds of registration information related to the operation of the disk device 100, and in this embodiment, includes user authentication information for authenticating a user who accesses the disk device 100.
[0025]
The disk device 100 performs user authentication processing based on the user authentication information acquired from the main body device 111, and permits access to the magnetic disk 108 via the main body device 111 when the user authentication is successful.
[0026]
FIG. 2 is a diagram illustrating a format example of user authentication information stored in the flash memory 110.
[0027]
As the user authentication information 201, a user ID 202, a password 203, an access right 204, and a main device ID 205 related to one user are registered.
[0028]
Note that only one user ID 202, one password 203, and one access right 204 can be registered, but a plurality of main device IDs 205 can be registered. As the access right 204, there are a case where the user has only the right to read data on the disk device 100, and a case where the user has both the right to read data on the disk device 100 and the right to perform writing.
[0029]
In the initial state of the disk device 100, the user authentication information 201 is in an unregistered state. After at least one user ID 202, password 203, and access right 204 are registered, a user authentication function for authenticating an accessor can be executed. It becomes.
[0030]
A user who is authenticated by the user ID 202 and the password 203 is permitted to access the magnetic disk 108 and can change the registered contents of his password 203.
[0031]
When the password 203 is stored in the flash memory 110, it is stored as a hash value instead of a plain text state, and is compared with a hash converted version of the plain text password input at the time of user authentication, thereby preventing tamper resistance. It is desirable to improve.
[0032]
The main device ID 205 is used for the disk device 100 to identify the main device 111, and in the present embodiment, a plurality of main device IDs can be registered.
[0033]
The main device ID 205 is in an unregistered state (NULL) in the initial state of the disk device 100, and when the disk device 100 is mounted on any of the main devices 111 and user authentication is successful, the main device of the main device 111. ID is registered. That is, by referring to the main device ID 205, a user registered in the disk device 100 (usually the owner of the disk device 100) can identify the main device 111 that has been successfully authenticated.
[0034]
Next, mounting processing (including user authentication processing) according to the first embodiment will be described based on the flowcharts of FIGS. 3 and 4.
[0035]
FIG. 3 is a flowchart showing the mounting process on the main device 111 side, and FIG. 4 is a flowchart showing the mounting process on the disk device 100 side. The CPU (not shown) of the main device 111 and the CPU 101 of the disk device 100 are respectively The control program corresponding to the flowcharts of FIGS. 3 and 4 is executed.
[0036]
First, the mounting process on the main apparatus 111 side will be described based on the flowchart of FIG.
[0037]
When the disk device 100 is installed in a slot (not shown) of the main device, the main device 111 issues an IDENTIFY DEVICE command to the disk device 100 in order to acquire performance parameters and the like of the disk device 100 (step S301).
[0038]
Next, the main device 111 notifies the main device ID to the disk device 100 by a predetermined command (for example, a vendor unique ATA command) (step S302). Then, the main device 111 performs a mount process for forming a logical connection with the disk device 100 using the file system driver 113 (step S303).
[0039]
Next, whether or not information indicating that input (input operation) of user authentication information (user ID and password) is unnecessary is received as response information from the disk device 100 to the IDENTIFY DEVICE command issued in step S301. Judgment is made (step S304). As a result, when the information indicating that the user ID and password input operation is not necessary is received, the mount is successful and the disk device 100 can be accessed (step S308).
[0040]
On the other hand, when information indicating that an input operation of user authentication information is necessary is received, a UI screen for inputting user authentication information (user ID and password) is displayed on the display unit (not shown) of the main device 111. A user authentication command (for example, a vendor unique ATA command) with the user ID and password input via the UI screen is displayed and issued to the disk device 100 (step S305).
[0041]
Then, it is determined whether or not the response information from the disk device 100 with respect to the issued user authentication command indicates successful authentication (step S306). As a result, if the authentication is successful, the mount is successful and the disk device 100 can be accessed (step S308). If the authentication is unsuccessful, the mount is failed and the disk device 100 cannot be accessed. (Step S307).
[0042]
Next, the mounting process on the disk device 100 side will be described based on the flowchart of FIG. In the initial state, the disk device 100 is prohibited from accessing the magnetic disk 108 via the main body device 111.
[0043]
When the disk device 100 receives the IDENTIFY DEVICE command from the main device 111 (see step S301 in FIG. 3), the magnetic disk 108 in the disk device 100 via the main device 111 together with the predetermined performance information of the disk device 100 is received. Response information indicating that user authentication is required when accessing the server and that it has a function of relaxing the criteria for determining the user authentication is returned to the main unit 111 (step S309).
[0044]
Next, the disk device 100 accesses the magnetic disk 108 in the disk device 100 via the counterpart main device 111 based on the main device ID notified from the main device 111 (see step S302 in FIG. 3). At this time, it is determined whether or not input (input operation) of user authentication information (user ID and password) is necessary (step S310). Specifically, it is determined whether or not the notified main device ID is registered as the user authentication information 201 (main device ID 205). If the notified main device ID is registered, the main device 111 is determined. Means that user authentication information (user ID and password) is not required to be input, so that the user authentication criteria are relaxed. On the other hand, if the notified main device ID is not registered, it is determined that an input operation of user authentication information is necessary, and the criteria for determining user authentication are not relaxed.
[0045]
If it is determined in step S310 that the user authentication information input operation is unnecessary, response information to that effect is returned to the main unit 111 (step S317). Thereafter, without performing user authentication processing based on the input data (user ID and password), the process proceeds to step S316, and transitions to an access permission state permitting access to the magnetic disk 108 via the main unit 111.
[0046]
On the other hand, if it is determined in step S310 that an input operation of user authentication information is necessary, response information to that effect is returned to the main unit 111 (step S311). Then, it is checked whether the combination of the user ID and the password transmitted from the main body device 111 is registered as the user authentication information 201 in response to the response information indicating that the user authentication information input operation is necessary. Thus, user authentication processing is performed (step S312). In this case, if the combination of the user ID and the password is registered as the user authentication information 201, the authentication is successful, and if not registered, the authentication is unsuccessful.
[0047]
Next, it is determined whether or not the user authentication in step S312 has been successful (step S313). If the authentication has failed, the access prohibited state is maintained (step S314).
[0048]
On the other hand, if the authentication is successful, the main device ID notified from the main device 111 is registered as user authentication information 201 (main device ID 205) (step S315), and the magnetic disk 108 is accessed via the main device 111. Transition to an access-permitted state permitting this (step S316).
[0049]
As described above, in the first embodiment, it is determined whether or not user authentication has been successful in the past between the disk device 100 and the main body device 111 related to mounting, and user authentication has been successful in the past. In this case, even if a user ID and a password are not input as user authentication information, access to the magnetic disk 108 via the main unit 111 is permitted.
[0050]
If the user authentication has not been successful in the past, the magnetic disk 108 is accessed via the main unit 111 on condition that a user ID and password registered in advance in the disk device 100 are input. I try to allow it.
[0051]
As a result, when the disk device 100 is mounted on the third-party main body device 111, security is maintained, and usability when the disk device 100 is mounted on the main body device 111 of a legitimate user is improved. be able to.
[0052]
Needless to say, the main apparatus 111 is authenticated by a legitimate user at the time of start-up.
[0053]
[Second Embodiment]
Next, a second embodiment will be described.
[0054]
The disk device 100 according to the second embodiment has a function of activating a predetermined protection function when a counter that counts the number of erroneous password inputs reaches a predetermined value. If it is determined that the user authentication is successful, the determination criterion of the user authentication is relaxed by not counting the input of the password that matches the past password stored in the history as an erroneous input.
[0055]
Hereinafter, differences from the first embodiment will be described.
[0056]
As shown in FIG. 5, in the second embodiment, user authentication information 201a, 201b, 201c,..., 201n relating to a plurality of users is registered as the user authentication information 201. Among these, the user authentication information 201a relates to a master user who has a certain degree of authority, and the user authentication information 201b, 201c,..., 201n relates to other general users.
[0057]
As user authentication information 201b, 201c,..., 201n related to general users, a user ID 202, a password 203, and an access right 204 are registered. As user authentication information 201a related to the master user, a main device ID 205 and a password change history 206 are registered in addition to the user ID 202, the password 203, and the access right 204.
[0058]
The user ID 202 related to the master user and the user ID 202 related to the general user can be identified. This identifiability can be realized, for example, by adopting measures such as adopting different code systems or including a predetermined key code in the user ID 202 related to the master user.
[0059]
As the password change history 206, when the password of the master user is changed, the password before the change, that is, the password used in the past is registered by the FIFO method.
[0060]
Further, in the determination at step S310 in the flowchart of FIG. 4, the disk device 100 always determines that the user authentication information input operation is necessary, and proceeds to step S311.
[0061]
Thereby, in the second embodiment, even if it is determined that the user authentication has been successful in the past in the attached main device 111, the user authentication information (user ID and password) is accessed at the time of access. An input operation is required.
[0062]
Further, in the second embodiment, even if the input password is incorrect, the password re-entry attempt is allowed a predetermined number of times. However, the re-entry process is performed by the user of step S305 in FIG. It is executed in the authentication process, and is executed in the user authentication process in step S312 of FIG. 4 on the disk device 100 side.
[0063]
Furthermore, in step S315 of FIG. 4, the disk device 100 according to the second embodiment performs registration of the main device ID only when the master user authentication is successful. ID registration is not performed.
[0064]
Next, user authentication processing on the main device 111 side in the second embodiment will be described based on the flowchart of FIG.
[0065]
In step S401, a UI screen for inputting a user ID and password is displayed on a display unit (not shown), and the user ID and password input via the UI screen are acquired.
[0066]
In step S402, a user authentication command with the user ID and password acquired in step S401 is issued to the disk device 100.
[0067]
In step S403, it is determined whether the response from the disk device 100 to the issued user authentication command is a response indicating that the authentication is successful. As a result, if the response indicates that the authentication is successful, the fact is displayed (step S406), and the user authentication process is terminated.
[0068]
On the other hand, if the response indicates that the authentication has failed, it is further determined whether or not the response indicates that re-issuance of the user authentication command is permitted (step S404). As a result, if the response indicates that the reissuance of the user authentication command is permitted, the process returns to step S401, and a display requesting input of the user ID and password is performed.
[0069]
On the other hand, if the response indicates that the re-issuance of the user authentication command is prohibited, it is determined that the user authentication has failed, the fact is displayed (step S405), and the user authentication process is terminated.
[0070]
Next, user authentication processing on the disk device 100 side in the second embodiment will be described based on the flowchart of FIG.
[0071]
First, in step S407, a counter for counting the number of erroneous password inputs is initialized to zero. This counter is provided in the work RAM 109.
[0072]
In step S408, it is determined whether or not the combination of the user ID and password attached to the user authentication command from the main body device 111 is registered as the user authentication information 201a to 201n. As a result, if it is registered as the user authentication information 201a to 201n, a response indicating that the authentication is successful is returned to the main body device 111 (step S409), and the fact that the authentication is successful is set (step S410). The user authentication process is terminated.
[0073]
On the other hand, when the combination of the user ID and the password attached to the user authentication command from the main body device 111 is not registered as the user authentication information 201a to 201n, it is determined whether or not the user authentication determination criteria should be relaxed. (Step S411).
[0074]
Specifically, when the user ID attached to the user authentication command issued from the main device 111 and the main device ID notified from the main device 111 are registered as the user authentication information 201a related to the master user. This means that master device authentication has succeeded in the main device 111 in the past, so it is determined that the user authentication criteria will be relaxed, and the user ID and the main device ID are the user authentication information 201a related to the master user. Is not registered, it means that the authentication of the master user or the general user has not succeeded in the past in the main device 111, and therefore it is determined that the user authentication determination criteria are not relaxed.
[0075]
If it is determined in step S411 that the user authentication criterion is not relaxed, the counter is incremented by “1” in step S413. Then, it is determined whether or not the counter has exceeded a predetermined value (step S414). As a result, if the counter does not exceed the predetermined value, a response indicating that re-issuance of the user authentication command is allowed is returned to the main apparatus 111 (step S415), and the process returns to step S408. Wait for user authentication command.
[0076]
On the other hand, if the counter exceeds a predetermined value, a response indicating that re-issuance of the user authentication command is prohibited is returned to the main unit 111 (step S416), and authentication failure is set and a predetermined protection function is set. Is activated (step S417), and the user authentication process is terminated.
[0077]
In the present embodiment, as the predetermined protection function, for example, the user authentication information related to the user ID is deleted as a password or a cover, but other protection modes are used. Also good.
[0078]
If it is determined in step S411 that the user authentication determination criteria are relaxed, the process proceeds to step S412 and the password attached to the user authentication command is used as the user password change history 206 related to the user ID attached to the user authentication command. Determine whether it has been saved.
[0079]
As a result, if it is stored as the password change history 206, a response indicating that re-issuance of the user authentication command is permitted is returned to the main unit 111 without counting as an erroneous input of the password (step S415). The process returns to S408.
[0080]
On the other hand, if it is determined that the password attached to the user authentication command is not stored as the password change history 206 of the user associated with the user ID attached to the user authentication command, the process proceeds to step S413, Counts as incorrect password entry.
[0081]
As a result of the above processing, if user authentication has succeeded in the past in the installed main device, the master user is not counted as an erroneous input even if the past password stored in the history is erroneously entered. The number of input trials can be increased, improving usability. Further, when the disk device is mounted on a third party main unit, security is maintained by the user authentication function.
[0082]
The present invention is not limited to the first and second embodiments described above. For example, for a general user, the main device ID 205 and the password change history 206 are registered in the same manner as the master user. If the user authentication has been successful in the past in the attached main body device, the number of password re-entry attempts may be increased.
[0083]
Another object of the present invention is to supply a storage medium (or recording medium) on which a program code of software that realizes the functions of the above-described embodiments is recorded to a system or apparatus, and to computer (or CPU or MPU of the system or apparatus) Needless to say, this is also achieved by reading and executing the program code stored in the storage medium.
[0084]
In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention. Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an operating system (OS) running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.
[0085]
Further, after the program code read from the storage medium is written in a memory provided in a function expansion card inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the CPU or the like provided in the card or the function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing. When the present invention is applied to the storage medium, the storage medium stores program codes corresponding to the flowcharts described above (shown in FIGS. 3, 4, 6, and 7).
[0086]
【The invention's effect】
As described above, according to the present invention, it is possible to provide a storage device that improves the usability of a legitimate user while maintaining security against unauthorized access from a third party.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a schematic configuration of a disk device in first and second embodiments.
FIG. 2 is a diagram showing a format of user authentication information in the first embodiment.
FIG. 3 is a flowchart showing a mounting process on the main device side in the first embodiment.
FIG. 4 is a flowchart showing mount processing on the disk device side in the first embodiment.
FIG. 5 is a diagram showing a format of user authentication information in the second embodiment.
FIG. 6 is a flowchart showing user authentication processing on the main device side in the second embodiment.
FIG. 7 is a flowchart showing user authentication processing on the disk device side in the second embodiment.
[Explanation of symbols]
100: Disk device
101: CPU
102: ATA interface
106: Recording / playback control unit
107: Mechanism control unit
108: Magnetic disk
109: Work RAM
110: Flash memory
111: Main unit
201: User authentication information
202: User ID
203: Password
205: Main unit ID
206: Password change history

Claims (10)

In a storage device that is detachable from the main unit,
User authentication means for authenticating a user accessing the storage device from the main unit based on user authentication information input from the main unit;
A determination means for determining whether or not user authentication by the user authentication means has been successful in the past in the main body device;
And a criterion determining unit that determines a criterion for determining user authentication of the user authenticating unit based on a determination result of the determining unit. If the determination unit determines that user authentication by the user authentication unit has been successful in the past by the determination unit, the reference determination unit performs user authentication without requesting an input operation of the user authentication information. The storage device according to claim 1, wherein the storage device is successful. The determination unit includes an acquisition unit that acquires the identification information of the main unit from the main unit, and a storage unit that stores identification information of the main unit that has been successfully authenticated by the user authentication unit in the past. The identification information of the main device stored in the storage means is acquired by the acquisition means, and it is determined that user authentication by the user authentication means has been successful in the past in the main device. Item 3. The storage device according to Item 1 or 2. The storage device according to claim 1, wherein the user authentication unit performs user authentication so as to permit access to only one user. The user authentication means includes storage means for storing a history of user authentication information used in the past, and regulation means for restricting the number of re-entry attempts when the user authentication information is erroneously input, When the determination unit determines that the user authentication by the user authentication unit has been successful in the past by the determination unit, the determination unit stores the user authentication information used in the past stored in the storage unit. 2. The storage device according to claim 1, wherein an input is not counted as the erroneous input. The storage device according to claim 5, wherein the user authentication unit performs user authentication such that access can be permitted to a plurality of users. The storage device according to claim 5 or 6, wherein the user authentication information is a password. The determination means stores acquisition means for acquiring identification information of the main body apparatus from the main body apparatus, and storage means for storing identification information of a main body apparatus that has been successfully authenticated by the user authentication means in the past for a predetermined user. When the identification information of the main device stored in the storage means is acquired by the acquisition means and the identification information of the predetermined user is input, the user by the user authentication means in the past in the main device The storage device according to claim 5, wherein authentication is determined to be successful. In the control method of the storage device detachable from the main unit,
A user authentication step for authenticating a user accessing the storage device from the main unit based on user authentication information input from the main unit;
A determination step of determining whether or not user authentication by the user authentication step has succeeded in the past in the main body device;
And a criterion determining step for determining a criterion for determination of user authentication in the user authentication step based on a determination result of the determination step. A storage device control program that is detachable from the main unit,
A user authentication process for authenticating a user accessing the storage device from the main unit based on user authentication information input from the main unit;
A determination process for determining whether or not user authentication by the user authentication process has been successful in the past in the main unit;
And a reference determination process for determining a determination criterion for user authentication of the user authentication process based on a determination result of the determination process.

Images