JP2016076185A - Disk device interface apparatus and disk device apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a disk device interface apparatus and a disk device apparatus capable of reducing a disadvantage in placing a file in a local such as the PC side of each person.SOLUTION: A disk device interface apparatus including a first interface connected to a transfer destination device which is a transfer destination of data and a second interface connected to a disk device which holds data, comprises: means for accepting a transfer instruction; and means for reading the data in the disk device through the second interface and transferring the data to the transfer destination device through the first interface.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a disk device device such as a hard disk drive and its interface device.

  In recent years, in organizations such as companies, NAS (Network Attached Storage) and file servers are placed to back up data to these devices. This is a measure against a failure of a personal computer (PC) possessed by each member of the organization and prevents data from leaking even if the PC is stolen by preventing data from being left on the PC side. It is also a measure to make.

  However, from the PC user side, it is necessary to perform a backup operation to NAS or the like at the end of the work, and the operation burden increases. Therefore, for example, Patent Document 1 discloses a technique for performing backup from a hard disk in response to a logout operation at the end of work.

JP-A-4-143825

  However, with the above conventional backup technology, it is necessary to perform logout operations such as logout as a backup trigger, and the PC is turned off without being connected to the backup device. Considering the usage situation, there are cases where the burden of backup operation is not necessarily reduced.

  The present invention has been made in view of the above circumstances, and is a disk device interface that can reduce the disadvantages of placing a file locally, such as each PC's side (data leakage at the time of theft, complicated management, increased backup burden). It is an object of the present invention to provide an apparatus and a disk device apparatus.

  The present invention for solving the problems of the above conventional example is a disk device interface apparatus, which is connected to a first interface connected to a transfer destination apparatus as a data transfer destination, and to a disk device holding data A second interface configured to receive the transfer instruction; and to receive the transfer instruction and read data in the disk device via the second interface; And a transfer means for transferring to the transfer destination device.

  As a result, if data is stored in the disk device connected via the disk device interface apparatus from the PC and the disk device interface apparatus is operated, the PC connection is released. Even if it exists, transfer to the transfer destination apparatus is performed, and the burden of transfer such as backup can be reduced.

  According to another aspect of the present invention, there is provided a disk device device, a disk device, storage means for receiving data to be stored, and storing the received data in the disk device, a data transfer destination, An interface connected to the transfer destination device, means for accepting the transfer instruction, and transfer means for accepting the transfer instruction and transferring the data in the disk device to the transfer destination device. is there.

  As a result, by storing data in the disk device device from the PC, if the operation is performed on the disk device device, the data can be transferred to the transfer destination device even after the PC is disconnected. It is possible to reduce the burden of transfer such as backup.

  Here, the storage means encrypts the received data and stores it in the disk device, and the transfer means decrypts the encrypted data stored in the disk device and transfers the encrypted data. Also good. By encrypting the data stored in the disk device in this way, even if the disk device itself is stolen, the chance of data leakage can be reduced and the management complexity can be reduced. .

  Further, when the means for accepting data to be stored accepts data, the interface connected to the transfer destination device may stop communication with the transfer destination device. Furthermore, while the transfer means is transferring data, the means for receiving the data to be stored may interrupt the data reception.

  As a result, it is possible to reduce the chance that the data being written is transferred or new data is written during the transfer.

  According to the present invention, it is possible to reduce the chance of data leakage at the time of theft by placing a file locally such as each PC side, reduce management complexity, and reduce the burden of backup.

It is a block diagram showing the example of a structure of the disk device apparatus concerning embodiment of this invention. It is a functional block diagram showing the example of the control part of the disk device interface apparatus which concerns on embodiment of this invention. It is explanatory drawing showing the example of the content of the setting information which the disk device interface apparatus concerning embodiment of this invention produces | generates. 4 is a flowchart showing an operation example of the disk device interface apparatus according to the embodiment of the present invention.

  Embodiments of the present invention will be described with reference to the drawings. As illustrated in FIG. 1, a disk device device 1 according to an embodiment of the present invention includes a disk device interface device 10 and a disk device 20 such as a hard disk drive or an SSD (Solid State Drive). The disk device interface device 10 includes a control unit 11, a storage unit 12, an operation unit 13, a first interface 14, a second interface 15, and an external interface 16. Here, the second interface 15 is a SATA (Serial ATA) interface, for example, and is connected to the disk device 20. Further, the external interface 16 is, for example, a USB interface, and the disk device interface apparatus 10 according to the present embodiment can be connected to a device such as a PC for instructing storage / reading of data with respect to the disk device 20 via the external interface 16. It has become.

  Here, the control unit 11 is a program control device such as a microcomputer, and operates according to a program stored in the storage unit 12. In the present embodiment, the control unit 11 sends data input from the PC side via the external interface 16 to the second interface 15 in accordance with a data write instruction input from the PC side via the external interface 16. To the disk device 20. The control unit 11 reads data from the disk device 20 via the second interface 15 in accordance with the data read instruction input from the PC side via the external interface 16, and sends data to the PC via the external interface 16. To output the read data.

  In addition, the control unit 11 according to the present embodiment accepts a transfer instruction from the user, reads the data in the disk device 20 via the second interface 15, and transfers the data to the transfer destination device via the first interface 14. Perform the process. Specific contents of the processing of the control unit 11 will be described in detail later.

  The storage unit 12 holds a program executed by the control unit 11. In the present embodiment, the storage unit 12 also operates as a work memory of the control unit 11.

  The operation unit 13 is, for example, a button or the like, accepts an operation from the user, and outputs the content of the operation to the control unit 11. In the example of the present embodiment, the operation unit 13 is a push button that accepts a transfer instruction, or a button displayed on the touch panel. When the push button is pressed, the user is instructed to transfer. Information is output to the control unit 11. Here, the transfer instruction is accepted by the operation unit 13, but the transfer instruction may be transmitted from an external terminal or the like to a smartphone or the like connected via a network, wired or wireless communication (including short-range communication). A transfer instruction may be accepted from the terminal.

  The first interface 14 is, for example, a network interface, and sends data to a NAS or file server as the transfer destination device 30 via a network including a switching hub, a router, and the like according to an instruction input from the control unit 11.

  The disk device interface apparatus 10 according to the present embodiment has the above-described configuration, and a specific example is realized as a case of the disk device 20. Further, in the disk device interface device 10, the second interface 15 includes a SATA, a USB or other easy-to-removable device, or a short-range wireless communication such as Bluetooth (registered trademark) or TransferJet (registered trademark). The disk device interface device 10 may be implemented as a wireless device, and the disk device 20 may be a so-called cradle. Further, the second interface 15 may have a function of supplying power for operating the disk device 20 to the disk device 20 when possible, for example, in the case of a wired connection.

  Next, the operation of the control unit 11 of the disk device interface apparatus 10 according to the present embodiment will be described. The control unit 11 of the present embodiment is functionally configured to include a setting unit 21, a disk device control unit 22, and a transfer processing unit 23 as illustrated in FIG.

  Here, the setting unit 21 receives input of setting information from the PC used by the user, and stores the input setting information in the storage unit 12. In one example of the present embodiment, the setting unit 21 functions as a web server, and sends web page data for displaying / inputting setting information in response to a request. In response to an input instruction for setting information, the setting information is stored in the storage unit 12 in accordance with the instruction. The setting unit 21 is a terminal other than the PC used by the user, such as a manager's terminal or a smartphone connected via communication means such as a network (which may be wired or wireless). May accept input of setting information.

  The setting information received by the setting unit 21 of the present embodiment includes information for specifying the transfer destination device 30 (reference information such as the network address of the transfer destination device 30) and information specific to the connected disk device 20. (Disk device serial number, etc.).

  As a specific example, the setting unit 21 authenticates with a preset user name and password (which may be set in advance at the time of shipment from the factory and may be changed by the user thereafter). A web page for inputting setting information is presented to the user, and input of information unique to the connected disk device 20 and reference information of the transfer destination device 30 is requested. Information specific to the disk device 20 connected here may be acquired by the setting unit 21 by actually connecting the disk device 20 to the second interface 15. The setting unit 21 includes information specific to the disk device 20 input or acquired by the user here, a network address of the transfer destination device 30, a URL including designation of a storage location of the transfer destination, and the like. Is stored in the storage unit 12 as setting information (FIG. 3).

  The disk device control unit 22 accepts an instruction to read / write data from a PC connected via the external interface 16, writes data to the disk device 20, reads data from the disk device, and outputs it to the PC. In an example of the present embodiment, the disk device control unit 22 functions as a storage unit, and receives a data write instruction and data to be written from a PC connected via the external interface 16. accept. Upon receiving the data write instruction, the disk device control unit 22 refers to the setting information stored in the storage unit 12 and information unique to the disk device 20 currently connected via the second interface 15. And is compared with information unique to the disk device 20 included in the setting information. As a result of the comparison, if the respective information matches, the disk device control unit 22 encrypts the data input from the PC using a predetermined encryption key, and the disk device control unit 22 transmits the disk via the second interface 15. Write to device 20.

  Further, when this disk device control unit 22 receives an instruction to read data from the PC via the external interface 16, the disk device control unit 22 refers to the setting information stored in the storage unit 12 and is currently connected via the second interface 15. The information unique to the disk device 20 is acquired and compared with the information unique to the disk device 20 included in the setting information. As a result of this comparison, if the respective information matches, the disk device control unit 22 reads the data from the disk device 20 via the second interface 15 and reads the decryption key corresponding to the encryption key (with the encryption key). The encrypted data is decrypted using a decryption key for decrypting the encrypted data, and the decrypted data is output to the PC via the external interface 16.

  That is, in one example of the present embodiment, encrypted data is written to the disk device 20, and the data is decrypted at the time of reading. This encryption or decryption process is not necessarily required, but by performing these processes, transfer or the like is performed in the decrypted state, and even if a failure occurs in the disk device 20. Thus, it is possible to retrieve data that has not been encrypted by the disk device 20. In this example, only the disk device 20 designated in advance in the setting information is encrypted or decrypted. However, in one example of the present embodiment, the disk device control unit 22 Without comparing with the information, the connected disk device 20 may always be subjected to encryption and decryption processing to read and write data.

  The transfer processing unit 23 implements the transfer means of the present invention. When the transfer processing unit 23 receives input of information indicating that the user has issued a transfer instruction from the operation unit 13, the transfer processing unit 23 acquires information unique to the currently connected disk device 20 via the second interface 15. Then, information unique to the acquired disk device 20 is searched from the setting information stored in the storage unit 12. If the transfer processing unit 23 finds information that matches the information unique to the acquired disk device 20 from the setting information, the transfer processing unit 23 transfers the transfer destination device 30 associated with the found information. Read the reference information.

  Then, the transfer processing unit 23 reads the data in the disk device 20 via the second interface 15. Here, if the data in the disk device 20 is data encrypted by the disk device control unit 22, a decryption key corresponding to the encryption key (decryption key for decrypting data encrypted with the encryption key) Decrypt the encrypted data using. Then, the transfer processing unit 23 sends the decrypted data to the transfer destination device 30 specified by the read reference information via the first interface 14.

  This embodiment has the above-described configuration and operates as follows. A user of the disk device interface apparatus 10 of the present embodiment connects a PC and a disk device 20 to the disk device interface apparatus 10. In addition, the disk device interface apparatus 10 is connected to the network, and is set in a state where it can communicate with the transfer destination apparatus 30.

  Then, the user accesses the web server of the disk device interface apparatus 10 from the PC, acquires information unique to the disk device 20, and inputs reference information of the transfer destination apparatus 30. Then, the disk device interface apparatus 10 stores the information unique to the disk device 20 acquired here and the reference information of the transfer destination apparatus 30 in association with each other as setting information.

  Thereafter, when the user instructs on the PC to write the data generated by the PC (data generated by the application software on the PC) to the disk device 20, the PC that has received the instruction The data to be written is output to the disk device interface apparatus 10.

  The disk device interface apparatus 10 accepts input of the instruction and data to be written, acquires information specific to the disk device 20 currently connected via the second interface 15, and acquires the information. It is checked whether or not the matched information matches information unique to the disk device 20 included in the setting information. If the pieces of information match, the disk device interface apparatus 10 encrypts the data received from the PC using a predetermined encryption key and writes the encrypted data to the disk device 20.

  Thereafter, when the user creates a backup of the data, the user operates the operation unit 13 of the disk device interface apparatus 10 to give a transfer instruction. At the time of this transfer instruction, the PC may be shut down, or the PC itself may be disconnected from the disk device interface apparatus 10.

  The control unit 11 of the disk device interface apparatus 10 that has received the transfer instruction via the operation unit 13 starts the process illustrated in FIG. 4 and acquires information specific to the currently connected disk device 20 (S1). Then, information specific to the acquired disk device 20 is searched from the setting information stored in the storage unit 12 (S2). If the control unit 11 finds information that matches the acquired information unique to the disk device 20 from the setting information (if YES in step S2), the control unit 11 associates with the found information. The reference information of the transfer destination apparatus 30 being read is read (S3).

  Then, the control unit 11 of the disk device interface apparatus 10 reads the data in the disk device 20 (S4), and decrypts the encrypted data using the decryption key corresponding to the encryption key used at the time of writing the data (S4). S5). The control unit 11 sends the decrypted data to the transfer destination device 30 specified by the reference information read in step S3 (S6) and stores it.

  In addition, in the process S2, when the setting information including the information acquired in the process S1 cannot be found (in the case of No), the control unit 11 notifies an error (flashes a light emitting diode (not shown) or sounds). Etc.) and the process is terminated. In this case, backup is not performed.

  In the present embodiment, an area for storing the transferred data may be secured in the storage area in the disk device 20. Specifically, a directory such as “already transferred” may be created in the file system of the disk device 20. In this case, the control unit 11 of the disk device interface apparatus 10 moves the data in the disk device 20 that has been sent to the transfer destination apparatus 30 in the process S6 to this transferred directory (in the original location). It may be copied so as not to remain) or copied (copied while remaining in the original place).

  Further, in the present embodiment, an area for storing data to be transferred may be secured in the storage area in the disk device 20. Specifically, a directory such as “transfer target” may be created in the file system of the disk device 20. In this case, the controller 11 of the disk device interface apparatus 10 reads the data in this area when reading the data in step S4. If the data is encrypted at the time of writing, the data is decrypted and sent to the transfer destination device 30.

  In addition, when the disk device interface apparatus 10 of this example receives an instruction to read data in the disk device 20 from the PC, the disk device interface apparatus 10 acquires information specific to the currently connected disk device 20 and stores it in the storage unit 12. Compared with information specific to the disk device 20 included in the set information. As a result of this comparison, if the information matches, the disk device interface apparatus 10 reads the data from the disk device 20, decrypts the decryption key data corresponding to the encryption key used at the time of writing, and converts the decrypted data to the PC Output for.

  Further, since the data transferred to the transfer destination device 30 is decrypted data in the examples so far in the present embodiment, the PC is restored when the data is restored (written back to the disk device 20). May access the transfer destination device 30, read the data, and write it to the disk device 20.

  In the present embodiment, the disk device control unit 22 receives an instruction to read / write data from a PC connected via the external interface 16 and writes data to the disk device 20 or the disk device 20. While the data is being read out and output to the PC, even if the transfer processing unit 23 issues a transfer instruction from the operation unit 13 to the user, the transfer processing unit 23 does not immediately start the process for transfer (pauses the transfer). You may control so. In this case, if there is a transfer instruction while reading / writing data from / to the disk device 20, the transfer processing unit 23 starts processing for transfer after the reading / writing of data ends. Also good.

  Furthermore, when the operating system of the PC manages the data stored in the disk device 20 that is opened by any process, the open data among the data in the disk device 20 is managed. If there is, the transfer processing unit 23 may not transfer (pause the transfer) even if the user gives a transfer instruction. In this case, if there is a transfer instruction while data with the disk device 20 is open, the transfer processing unit 23 may start processing for transfer after the data is closed. Good. If an area for storing the data to be transferred is secured as in the above example, whether or not the transfer is suspended depending on whether or not the data stored in the area is open. May be controlled. In this case, when the data stored in the area for storing the data to be transferred is open, even if there is a transfer instruction, the process for transfer is not started immediately. In this example, when the transfer instruction is given, the transfer processing unit 23 may start the transfer process after the data is closed.

  Further, when the transfer processing unit 23 starts the transfer process, the disk device control unit 22 does not accept data read / write instructions from the PC side (the access right and the lock state are set and cannot be accepted). Even if it is accepted, it may be controlled so that it is ignored or an error is notified, that is, reading and writing are suspended. In this case, the data stored in the disk device 20 is read and edited on the PC side, and even if it is an instruction to write back the update result, the instruction is not accepted. Control is performed so as not to perform reading and writing by notifying an error that writing is impossible. Here, as in the above example, when an area for storing the data to be transferred is secured, the disk device control unit 22 accepts an instruction to read / write data from the PC side to the area. Control is performed such that the access right or lock state of the area is set to be unacceptable, or the area is hidden, such as being ignored or an error is notified, that is, reading / writing is temporarily stopped.

  As an example, the control unit 11 of the disk device interface apparatus 10 according to the present embodiment operates in one of a normal operation mode and a transfer operation mode. During operation in the normal operation mode, data read / write instructions are accepted from the PC connected via the external interface 16 and data is written to the disk device 20 and data is read from the disk device 20 to the PC. The output operation is performed, but the transfer process is not performed even if there is a transfer instruction.

  Further, when a transfer instruction is input in a state where data is not read or written or there is no open data, the control unit 11 shifts to the transfer operation mode, and during operation in the transfer operation mode, Even if a data read / write instruction is accepted from a PC connected via the external interface 16, data write / read processing is not performed (at this time, it is treated as an error on the PC side). Alternatively, it does not accept an instruction to read / write data from the PC (for example, if it is mounted, it is unmounted). After the transfer process is completed, the control unit 11 shifts to the normal operation mode. As a result, while the transfer processing unit 23 serving as a transfer unit is sending data to the transfer destination device 30 (while transferring data), the process of accepting data to be stored from the PC is interrupted. That is, during this time, the data to be stored is not accepted.

[Example of authentication with the transfer destination device]
In addition, the transfer processing unit 23 of the control unit 11 according to the present embodiment performs a transfer process with the transfer destination device 30 in advance (specifically, before the process S4 in the example of FIG. 4) before performing the transfer process. An authentication process may be executed. Specifically, this authentication process may be so-called Kerberos authentication, and the authentication process may be performed by communicating with a domain server (not shown). A widely known method can be employed for the authentication operation, and a detailed description thereof is omitted here.

[Example of managing disk device status]
The control unit 11 of the present embodiment also performs the s. m. a. r. t information is repeatedly acquired at a predetermined timing, and an error is notified when it is determined that the disk device 20 is likely to fail soon, such as when the number of abnormal sectors exceeds a predetermined threshold. It is also possible to turn on a light emitting diode (not shown) or sound a sound to notify.

[Example of not decrypting when transferring]
In the description so far, when the disk device interface apparatus 10 transfers data from the disk device 20 to the transfer destination apparatus 30, if the data in the disk device 20 is encrypted at the time of storage, it is decrypted. Had to transfer from. However, in this embodiment, it is not always necessary to perform decryption, and the encrypted data may be transferred to the transfer destination device 30 as it is.

  In this example, when restoration is performed, the disk device interface apparatus 10 performs control so that data to be copied from the transfer destination apparatus 30 to the disk device 20 is not encrypted. Specifically, in this case, the disk device interface apparatus 10 is instructed not to perform encryption before the instruction to write the encrypted data read from the transfer destination apparatus 30 on the PC side to the disk device 20 is performed. The disk device interface apparatus 10 writes the encrypted data to the disk device 20 without performing encryption again according to this instruction.

DESCRIPTION OF SYMBOLS 1 Disk device apparatus, 10 Disk device interface apparatus, 11 Control part, 12 Storage part, 13 Operation part, 14 1st interface, 15 2nd interface, 16 External interface, 20 Disk device, 21 Setting part, 22 Disk device Control unit, 23 transfer processing unit, 30 transfer destination device.

Claims (5)

A first interface connected to a transfer destination device as a data transfer destination, and a second interface connected to a disk device holding data;
A means of accepting the transfer instruction;
Transfer means for accepting the transfer instruction, reading data in the disk device via the second interface, and transferring the data to the transfer destination device via the first interface;
A disk device interface apparatus comprising: A disk device;
Storage means for receiving data to be stored, and storing the received data in the disk device;
An interface connected to a transfer destination device that is a data transfer destination; and
A means of accepting the transfer instruction;
Transfer means for accepting the transfer instruction and transferring the data in the disk device to the transfer destination device;
A disk device device comprising: The disk device device according to claim 2,
The storage means encrypts the received data and stores it in a disk device;
The disk device apparatus, wherein the transfer means decrypts the encrypted data stored in the disk device and then transfers it to the transfer destination apparatus. The disk device device according to claim 2 or 3, wherein
When the means for accepting the data to be stored accepts the data, the interface connected to the transfer destination device temporarily stops the transfer to the transfer destination device. The disk device device according to any one of claims 2 to 4,
A disk device device in which the storage means interrupts acceptance of data to be stored while the transfer means is transferring data.

Images