JP2007035136A - External hard disk storing apparatus, control method of external hard disk storing apparatus, and control program of external hard disk storing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an external hard disk storing apparatus in which only a part of a region can be locked while maintaining convenience, a control method of the external hard disk storing apparatus, and a control program of the external hard disk storing apparatus. <P>SOLUTION: When a power source is turned on, security lock of a whole hard disk drive 10 is unlocked using a pass word stored in the prescribed region by a security lock command based on the ATA standard (step S150), while in access after that, reading and writing are restricted for each part of the region with a sector unit (step S160), performing flexible operation of the security, when a power source is cut off, the whole hard disk drive 10 is protected by specifications of the hard disk drive 10 or individual clear security lock, illegal use, alteration, destruction, or the like can be prevented. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an external hard disk storage device, an external hard disk storage device control method, and an external hard disk storage device control program.

Conventionally, as this type of external hard disk storage device, the one shown in Patent Document 1 is known.
In the same document, for a hard disk of a PC having a password function compliant with the ATA standard, the system BIOS generates a password, stores the password, and uses the password when the PC starts and ends. Lock and unlock.
In the case of an external hard disk, when a SCSI command defined by the vendor is issued using a utility on the OS, the USB-IDE conversion controller converts it to a specific ATA command, and locks / unlocks the hard disk drive. Lock it.
JP 2004-78539 A

In the above-described conventional external hard disk storage device, there is a problem that only a part of the area cannot be locked.
The present invention has been made in view of the above problems, and an external hard disk storage device capable of locking only a part of the area while maintaining convenience, a control method for the external hard disk storage device, and an external connection An object is to provide a control program for a hard disk storage device.

  In order to achieve the above object, an invention according to claim 1 is an external hard disk storage device having a hard disk drive based on a predetermined hard disk standard, wherein a password storage means for storing a password and a power supply are turned on. Unlocking means to unlock the entire hard disk drive using the above password with the security lock command based on the above standard when the power is turned on, and the entire hard disk drive is unlocked In this state, there are provided an access restriction means for providing a function for restricting reading and writing for each partial area in a sector unit, and a lock means for applying a security lock based on the standard when the power is turned off.

  In the invention according to claim 1 configured as described above, the password is stored in the password storage means, and the unlocking means detects whether the power is turned on and the power is turned on. The entire hard disk drive is unlocked using the password with a security lock command based on the above standard. The lock means applies a security lock based on the above standard when the power is turned off. As a result, when the power is turned on, the security lock is released and access is possible, and when the power is turned off, the security lock is applied, so external access to the hard disk drive is impossible, including formatting. It becomes. On the other hand, even while the power is on, read / write can be restricted for each partial area by sector by the access restriction means.

According to a second aspect of the present invention, in the external hard disk storage device according to the first aspect, the password is determined by firmware.
In the invention according to claim 2 configured as described above, since the firmware determines the password, the security lock can be applied while eliminating the need for human work.
Furthermore, the invention according to claim 3 is configured such that the locking means applies a security lock based on power-off of the hard disk drive.
In the invention according to claim 3 configured as described above, the hard disk drive locks the security when the power is turned off. By setting it as such a specification, a lock | rock means can be substantially provided in a hard disk drive.
Furthermore, the invention according to claim 4 comprises a means for performing access to the hard disk drive by encrypting and decrypting.
In the invention according to claim 4 configured as described above, since the access to the hard disk drive performed when the power is turned on is performed through encryption and decryption, the encryption is performed even if the hard disk drive is removed when the power is turned on. Since it is recorded, it cannot be read out.

Furthermore, the invention according to claim 5 is configured such that the encryption and decryption are performed using a unique number of the hard disk drive.
In the invention according to claim 5 configured as described above, by using the unique number of the hard disk drive, it is possible to prevent a situation where the same password is easily used, and there is no troublesome password setting.
Furthermore, the invention according to claim 6 deletes the password used for the encryption and decryption if the hard disk drive is not connected to the connection detecting means for detecting whether the hard disk drive is connected. Password erasing means.

  In the invention according to claim 6 configured as described above, the connection detecting means detects whether or not the hard disk drive is connected on the assumption that access to the hard disk drive is performed through encryption and decryption. If the hard disk drive is not connected, the password erasing means erases the password used for the encryption and decryption.

As a result, the password used for encryption and decryption is erased, so that reading, writing, and erasure of data from the hard disk drive are completely impossible.
As described above, the method for applying the security lock is not necessarily limited to a substantial apparatus, and it can be easily understood that the method also functions as the method. Therefore, the invention according to claim 7 is a method of controlling an external hard disk storage device having a hard disk drive based on a predetermined hard disk standard, and detects whether or not the power is turned on and the power is turned on. When it becomes, the entire hard disk drive is unlocked using a password with the security lock command based on the above standard, and reading / writing is restricted for each area in units of sectors with the entire hard disk drive unlocked. At the same time, a security lock based on the above standard is applied when the power is turned off.

That is, it is not necessarily limited to a substantial apparatus, and there is no difference that the method is effective.
By the way, such an external hard disk storage device may exist independently, or may be used in a state of being incorporated in a certain device. Is included. Therefore, it can be changed as appropriate, such as software or hardware.

In the case of software for an external hard disk storage device as an embodiment of the idea of the invention, it naturally exists on a recording medium on which such software is recorded, and must be used.
As an example of software, the invention according to claim 8 is a control program for an external hard disk storage device having a hard disk drive based on a predetermined hard disk standard, the function of storing a password, and the power supply being turned on. When the power is turned on, the security lock command based on the above standard is used to unlock the entire hard disk drive using the password, and the entire hard disk drive is unlocked The computer is configured to realize a function of providing a function of restricting reading and writing for each partial area on a sector basis and a function of applying a security lock based on the above standard when the power is turned off.

  Of course, the recording medium for recording the software may be a magnetic recording medium, a magneto-optical recording medium, or any recording medium to be developed in the future. In addition, the duplication stages such as the primary duplication product and the secondary duplication product are equivalent without any question. In addition, even when the communication method is used as a supply method, the present invention is not changed.

Further, even when a part is software and a part is realized by hardware, the idea of the invention is not completely different, and a part is stored on a recording medium and is appropriately changed as necessary. It may be in the form of being read.
When the present invention is implemented by software, a configuration using hardware or an operating system may be used, or may be implemented separately from these. For example, even if it is a variety of arithmetic processing, if it can be processed by calling a predetermined function in the operating system, it can also be input from hardware without calling such a function. is there. It can be understood that the present invention can be implemented with only this program in the process in which the program is recorded and distributed on the medium even though it is actually realized with the intervention of the operating system.

  When the present invention is implemented by software, the present invention is not only realized as a medium storing a program, but the present invention is naturally realized as a program itself, and the program itself is also included in the present invention.

As described above, the present invention can provide an external hard disk storage device capable of providing security for each area during normal use while protecting the entire hard disk drive with a security lock.
Moreover, according to the invention concerning Claim 2, the operation | work which determines the password by a person is unnecessary and can reduce annoyance.
Furthermore, according to the invention of claim 3, the lock means can be provided substantially in the hard disk drive.
Furthermore, according to the fourth aspect of the present invention, even if the hard disk drive is removed when the power is turned on, the hard disk drive is encrypted and recorded, so that it cannot be read out, and secret protection can be enhanced. In addition, if the security lock is applied when the power is turned off, the security lock is also applied when the power supply is removed, and the safety is further increased.

Furthermore, according to the invention concerning Claim 5, the situation which uses the same password easily is prevented, and there is no troublesomeness of the setting of a password.
According to the sixth aspect of the present invention, even if the hard disk drive is removed so that the security lock is not applied, the password used for encryption and decryption is erased, and reading and destruction of data from the hard disk drive are completely prevented. It becomes impossible and increases safety.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing an external hard disk storage device according to an embodiment of the present invention.
In the figure, a hard disk drive (HDD) 10 conforms to the ATA standard. There are various commands in the ATA standard, including a security lock command. Security lock commands include lock and unlock commands. Locking is performed by a command with a predetermined password. Thereafter, the password is stored in the hard disk drive 10, and once locked, commands such as read / write and format become invalid until unlocked. The lock command may be instructed explicitly, or may be a specification that can be locked when the power is turned off.

  The conversion board 20 is interposed between an external computer (PC) 30 and the hard disk drive 10. The conversion board 20 is connected to the computer 30 via USB, and can perform bidirectional communication based on the USB standard. In the USB standard, communication is performed using a predetermined serial packet connection, and commands and data are transferred based on the SCSI standard in each packet.

  In the conversion board 20, a USB-ATA bridge 21 having a CPU therein, an auto power circuit 22 that is controlled by the USB-ATA bridge 21 to control power supply to the hard disk drive 10, and a USB-ATA bridge 21. A ROM 23 in which a program executed by the CPU and parameter data necessary for executing the program is written is provided.

  Further, since communication based on the ATA standard is performed between the conversion board 20 and the hard disk drive 10, an interface (I / F) 24 for enabling the communication is provided between the USB-ATA bridge 21 and the hard disk drive 10. It arrange | positions so that it may interpose. Similarly, the conversion board 20 and the PC 30 are connected based on the USB standard, and an interface (I / F) 25 for enabling USB standard communication is interposed between the USB-ATA bridge 21 and the PC 30. Is arranged.

  A predetermined driver program is loaded in the PC 30, and the PC 30 can use the USB-connected conversion board 20 and the hard disk drive 10 in the same manner as the built-in hard disk drive. That is, commands and data for accessing the hard disk drive 10 generated on the PC 30 side are output to the conversion board 20 as SCSI commands and data by packet communication based on the USB standard, and the conversion board 20 uses the SCSI commands and data. Are converted into ATA standard commands and data and output to the hard disk drive 10. Note that a nonvolatile data storage area is formed in the USB-ATA bridge 21.

  When the command or the like instructs reading from the hard disk drive 10 or requests a response, the conversion board 20 converts the output data based on the ATA standard from the hard disk drive 10 to the data based on the SCSI standard. And output to the PC 30 by packet communication based on the USB standard.

  At this time, the interfaces 24 and 25 mainly convert hardware signals, and the USB-ATA bridge 21 mainly performs command and data format conversion between different SCSI and USB standards. The USB-ATA bridge 21 performs security control as described below. The security control will be described below with reference to the flowchart shown in FIG.

  In step S110, it is determined whether a CPU in the USB-ATA bridge 21 (hereinafter simply referred to as a CPU) is turned on. However, in reality, the CPU starts when power supply is started by USB connection, and after initializing the variable area and the like, a plurality of execution programs are sequentially started. At that time, this program is started, It is determined that the power is on.

  In step S120, it is determined whether there is a password. This password is data required when the hard disk drive 10 is security-locked based on the ATA standard. In the security lock based on the ATA standard, when a password is set and a security lock command is output to the hard disk drive 10, the hard disk drive 10 does not respond to any command other than the unlock command accompanied by the password. That is, it does not accept formats, including reading and writing. As a result, it is possible to reject all of the aggressive accesses such as leakage of reading important data, falsification of overwriting important data, and deletion of important data.

  Once the security lock is set and the password is locked, the hard disk drive 10 automatically enters the lock mode when the power supply is cut off. Therefore, a password is essential when the power is supplied again to start up, and an area for storing the password is secured in the USB-ATA bridge 21 based on a program executed by the USB-ATA bridge 21. In step S120, the USB-ATA bridge 21 determines whether a predetermined password is stored in this storage area.

  If the password is not stored, the hard disk drive 10 is accessed for the first time, and the USB-ATA bridge 21 generates a password in step S130 and stores it in the above area in order to ensure the subsequent security. In step S140, a security lock command with the password is output to the hard disk drive 10. As a result, the hard disk drive 10 is in a state in which the security lock is applied when step S140 is completed.

  If it is determined in step S120 that the password is stored, except for the case where the password is generated by starting for the first time as described above, step S150 is executed. In step S150, an unlock command is sent to the hard disk drive 10 using the password stored in the predetermined area.

The hard disk drive 10 enters an unlock command with a password to release the security lock, and thereafter responds to commands based on the ATA standard until the power is turned off.
Step S160 indicates that subsequent access to the hard disk drive 10 via the USB-ATA bridge 21 can be restricted in units of sectors. Although a specific restriction method is not described in detail, various known methods can be employed. For example, it is possible to use a password or the like to restrict writing and reading to a certain area as a restricted area in advance in correspondence with FAT. It is also possible to specify the writing sector of a file or the like that has already been written based on the FAT, and restrict reading and writing to the sector using a password or the like.

  As described above, access can be restricted in units of sectors during energization, and convenience is improved. On the other hand, when the operation on the PC 30 is completed and the power supply is cut off, the USB-ATA bridge 21 does nothing in this embodiment, but the hard disk drive 10 enters the security lock state based on the specification. More specifically, once the hard disk drive 10 is turned off, the security lock state is entered when the hard disk drive 10 is restarted. For this reason, even if the hard disk drive 10 is removed and taken out to leak, tamper, or destroy data, the security lock state is established when the power is turned on, so that these purposes are achieved. I can't.

  However, in the case where the hard disk drive 10 does not enter the security lock state just by turning off the power supply according to the specification, the following can be performed. As a first method, since there is time until the power is actually turned off after the power is turned off, the USB-ATA bridge 21 sets a security lock for the hard disk drive 10 as in step S140. As a second method, the USB-ATA bridge 21 executes security unlock and security lock every time one command is received from the PC 30. For example, when there is a read / write access from the PC 30, the USB-ATA bridge 21 first allows access by applying security unlock in the same manner as in step S150, supports read / write, and when the processing ends, as in step S140. Make it inaccessible with a security lock. In this case, the security lock is applied except during access such as read / write, so that the security lock state can be surely established even when the power is shut off at any time.

  Next, a modified example for improving security will be described with reference to FIGS. As shown in the block diagram of FIG. 3, in this embodiment, an encryption / decryption circuit 26 is interposed between the USB-ATA bridge 21 and the interface 24. The encryption / decryption circuit 26 performs encryption and decryption when reading / writing data from / to the hard disk drive 10 based on an instruction from the USB-ATA bridge 21. The same password (encryption key) is required for encryption and decryption. The USB-ATA bridge 21 generates this encryption key based on data unique to the hard disk drive 10, stores it in a predetermined non-volatile area, and uses it for encryption and decryption.

  Specifically, the flowchart shown in FIG. 4 is executed when there is a data read / write request to the hard disk drive 10. In step S210, it is determined whether an encryption key has been created. Once the encryption key is created, it should be stored in a predetermined area in the USB-ATA bridge 21, so it is determined whether or not the encryption key has been created by looking at this area. If an encryption key has not been created, a serial number is obtained from the hard disk drive 10 in step S220, and an encryption key is created based on the serial number in step S230 and stored in the predetermined area. Although the same serial number can be used as it is as the encryption key, it is preferable to generate a new encryption key using the same serial number. In this case, it is convenient to be able to create the same encryption key from one serial number in case the encryption key is erased as will be described later. Of course, it is necessary to prevent the creation algorithm from being decrypted, and even if it is decrypted, register another key in advance and use that key to create the encryption key. It is possible to prevent an encryption key from being generated only by decrypting the algorithm.

  In step S240, it is determined whether or not the hard disk drive 10 is connected. Normally, the hard disk drive 10 should be connected, and if it is connected, the process proceeds to step S260 without performing any processing. However, there are cases where the hard disk drive 10 has been removed to steal data, for example, and in this case, the hard disk drive 10 is not connected, so the encryption key described above is erased in step S250.

  As described above, if the hard disk drive 10 is in the specification and the security lock is applied if the power supply is cut off, it is removed and the subsequent power supply is cut off. It is possible to disconnect. This is not usually possible even from the influence on the electronic circuit, but it cannot be denied as a possibility. However, even if the power supply is maintained as described above, the encryption key remains stored in a predetermined area in the USB-ATA bridge 21. Even if it is temporarily stored in the USB-ATA bridge 21, if the hard disk drive 10 is not connected when the process of the next step S240 is executed, the encryption key is deleted. The data cannot be normally read from the hard disk drive 10.

In this way, in addition to the security lock, and even in a situation where the security lock alone is still incomplete, the encryption key can be used to ensure data safety more reliably.
In this example, this processing is performed only when the hard disk drive 10 is accessed. However, if only steps S240 and S250 are executed independently, security performance is improved.
If the hard disk drive 10 is connected, data is read / written via the encryption / decryption circuit using the encryption key in step S260.
In this manner, when the power is turned on, the security lock command based on the ATA standard is used to unlock the entire hard disk drive 10 using the password stored in a predetermined area (step S150), and thereafter Access is restricted for each area in a sector unit (step S160), and the security is flexibly operated, and when the power is cut off, the hard disk drive 10 specification or individual explicit security is applied. The entire hard disk drive 10 can be protected by locking to prevent unauthorized theft, falsification, destruction, and the like.

1 is a block diagram of an external hard disk storage device according to an embodiment of the present invention. FIG. 4 is a flowchart of a control program executed in the external hard disk storage device. It is a block diagram of an external hard disk storage device according to another embodiment of the present invention. 4 is a flowchart of a control program executed in the external hard disk storage device.

Explanation of symbols

10. Hard disk drive (HDD)
20 ... Conversion board 30 ... Computer (PC)
21 ... USB-ATA bridge 22 ... auto power circuit 23 ... ROM
24, 25 ... Interface (I / F)
26: Encryption / decryption circuit

Claims (8)

An external hard disk storage device comprising a hard disk drive based on a predetermined hard disk standard,
Password storage means for storing a password;
Unlock means for detecting whether the power is turned on and unlocking the entire hard disk drive using the password with the security lock command based on the standard when the power is turned on,
An access restriction means for providing a function of restricting reading and writing for each area in units of sectors in a state where the entire hard disk drive is unlocked;
An external hard disk storage device comprising: locking means for applying a security lock based on the above standard when the power is turned off. 2. The external hard disk storage device according to claim 1, wherein the password is determined by firmware. 3. The external hard disk storage device according to claim 1, wherein the lock unit is configured to apply a security lock when the hard disk drive is powered off. 4. The external hard disk storage device according to claim 1, further comprising encryption / decryption means for performing access to the hard disk drive by encryption and decryption. 5. The external hard disk storage device according to claim 4, wherein the encryption and decryption are performed using a unique number of the hard disk drive. Connection detecting means for detecting whether or not the hard disk drive is connected, and password erasing means for deleting the password used for encryption and decryption if the hard disk drive is not connected. The external hard disk storage device according to claim 4 or 5, wherein: A method for controlling an external hard disk storage device including a hard disk drive based on a predetermined hard disk standard,
Detects whether the power is turned on, and when the power is turned on, unlocks the entire hard disk drive using a password with the security lock command based on the above standard,
In the state that the entire hard disk drive is unlocked, reading and writing are restricted for each area in units of sectors,
A control method for an external hard disk storage device, wherein a security lock based on the above standard is applied when the power is turned off. A control program for an external hard disk storage device having a hard disk drive based on a predetermined hard disk standard,
The ability to remember passwords,
A function to detect whether the power is turned on and to unlock the entire hard disk drive using the password with a security lock command based on the standard when the power is turned on;
A function that provides a function to limit reading and writing for each area in units of sectors with the entire hard disk drive unlocked,
A control program for an external hard disk storage device, which causes a computer to realize a function of applying a security lock based on the above standard when the power is turned off.

Images