JP7076089B2 - Storage device, status management method, and status management program - Google Patents

Description

The present invention relates to a technique for protecting data.

Gaming machines such as pachinko and slots are equipped with information processing devices that process images, sounds, and the like. In the gaming machine, in order to prevent falsification, theft, diversion, etc. of image data, audio data, program data, etc. (hereinafter, also simply referred to as data), encrypted data in which the data is encrypted is stored in a storage device (ROM: Read Only Memory). ), The information processing device reads the encrypted data from the storage device according to the progress of the game, and decrypts and uses the read encrypted data.
Patent Document 1 describes a program related to a game content (game scenario, etc.), a storage device that encrypts and stores image data, audio data, and the like, and a pachinko machine provided with a CPU, a liquid crystal panel, and the like. In this pachinko machine, when the program is executed, the encrypted file is decrypted on the RAM and the program or the like as the original file is generated.

Japanese Unexamined Patent Publication No. 2011-240064

In the gaming machine described in Patent Document 1, if a third party obtains a development environment including an encryption key, the encrypted file stored in the storage device can be rewritten. It may not be possible to prevent fraudulent activity due to falsification.
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a novel technique capable of preventing fraudulent acts due to falsification of data.

In order to solve the above problems, the invention according to claim 1 is a storage device that executes writing of the status of the storage device and data input from the information processing device, and is a storage device for storing the data. The means, the setting storage means for storing as a trigger command the instruction selected to function as a trigger for changing the status of the storage device from the commands that can be input to the storage device, and the status of the storage device. A document that prohibits writing of the data to the storage means when the write prohibition of the data to the storage means is set to the reserved write prohibition reserved state and the trigger command is input. It is characterized by being provided with a status management means for changing to a prohibited state.

According to one embodiment, fraudulent acts due to falsification of data can be prevented.

It is a state transition diagram of the external storage device which concerns on one Embodiment of this invention. It is a hardware block diagram which shows the information processing apparatus and the external storage apparatus which concerns on one Embodiment of this invention. It is a block diagram which showed the functional structure of the external storage device which concerns on one Embodiment of this invention. It is a sequence diagram which shows the setting process and the reservation process. It is a sequence diagram which shows the data writing processing and prohibition processing. It is a sequence diagram which shows the data writing process in the write-protected state. It is a sequence diagram which shows the permission process. It is a state transition diagram of the external storage device which concerns on the 2nd Embodiment of this invention. It is a hardware block diagram which shows the information processing apparatus and the external storage apparatus which concerns on 2nd Embodiment of this invention. (A) and (b) are sequence diagrams showing the flow from the data writing process to the prohibition process.

The present invention has a write permission state as a status indicating whether or not user data (simply referred to as "data" in the following description) can be written to an external storage device such as an SSD (Solid State Drive) or an HDD (Hard Disk Drive). When a write-protected reservation status is provided in addition to the write-protected status, and when the external storage device is in the write-protected reservation state and a specific command is input from the information processing device. The feature is that it shifts to the write-protected state.
Hereinafter, the present invention will be described in detail using the embodiments shown in the figure. However, unless there is a specific description, the components, types, combinations, shapes, relative arrangements, etc. described in this embodiment are merely explanatory examples, not the purpose of limiting the scope of the present invention to that alone. ..

[First Embodiment]
[State transition diagram]
FIG. 1 is a state transition diagram of an external storage device according to an embodiment of the present invention.
The external storage device shifts to a write-permitted state that permits (does not limit) data writing, a write-protected state that prohibits data writing, and a write-protected state that permits data writing but under certain conditions. It transitions between the three statuses of the reserved write-protected reserved state.
The external storage device transitions to the write-protected state when it is in the write-protected reserved state and a specific command (trigger command) is input from the host device (information processing device) connected to the external storage device. (Transition A). In the present invention, as an example, an instruction normally input after the completion of data writing can be used as a trigger instruction. The write permission state and the write prohibition reserved state are common in that data can be written, but the write permission state is written in that the write prohibition state does not change even if a trigger command is input. It is different from the prohibited reservation status. Further, the external storage device may be included in, for example, an image processing device that processes an image to be displayed on a display device, a sound processing device that processes sound output from a sound emitting device, and the like.

The external storage device provided to the user in the write-protected reserved state transitions to the write-protected state only by writing data. Therefore, the user uses the external storage device as a storage device that can be written only once, such as a one-time ROM, without being aware of either the status of the external storage device or the instruction for transitioning to the write-protected state. can do.

When a reservation command (status change command) is input from the host device together with the password, the external storage device transitions to the write-protected reservation state (transitions B1 and B2). Further, the external storage device transitions to the write permission state when a permission command (status change command) is input from the host device together with the password (transitions C1 and C2). The transition B2 may be implemented as needed.
Since the external storage device automatically transitions from the write-protected reserved state to the write-protected state when the user finishes writing data, the external storage device can be operated as a storage device that can be written only once. Further, since the external storage device transitions from the write-protected state to the write-permitted state when a permission command is input from the host device, the external storage device can be reused as a medium on which data can be written. can.

If the password required for transitions B1 and B2 and transitions C1 and C2 is managed by the manufacturer of the external storage device (or the supplier of the external storage device), the password is managed by the user side (customer side) who writes the data to the external storage device. There is no need to do this, and the burden on the user can be reduced. In addition, in terms of the distribution of external storage devices, if the password is managed by the manufacturer located upstream from the user and the transitions B1 and B2 and the transitions C1 and C2 are executed only by the manufacturer, the leakage of the password can be prevented. However, unauthorized use of the external storage device by a third party can be effectively prevented.

[Hardware configuration]
FIG. 2 is a hardware configuration diagram showing an information processing device and an external storage device according to an embodiment of the present invention.
The information processing device (host device) 100 includes a CPU (Central Processing Unit) 110, a ROM (Read Only Memory) 120, a RAM (Random Access Memory) 130, an external I / F 140, an input / output I / F 150, and a display I / F 160. And a bus 170. Each component is connected by a bus 170. The information processing device 100 may include a storage device (not shown) such as an HDD or SSD. Further, the information processing device 100 may include a reading device (not shown).

The CPU 110 controls the entire information processing apparatus 100 by using a program or the like stored in the ROM 120. The ROM 120 is a non-volatile storage means for storing a control program for causing the CPU 110 to execute a process for controlling the entire information processing apparatus 100. The control program for executing the process of controlling the entire information processing apparatus 100 may be stored in the storage device included in the information processing apparatus 100.
The control program for executing the process of controlling the entire information processing device 100 is stored in the recording medium, read by the reading device included in the information processing device 100, and stored in the ROM 120 or the storage device included in the information processing device 100. You may. Further, a control program for executing a process for controlling the entire external storage device 200, which will be described later, may be stored in a recording medium, read by a reading device included in the information processing device 100, and output to the external storage device 200. good. Recording media include, for example, SD memory card (SD Memory Card), FD (Floppy Disk), CD (Compact Disc), DVD (Digital Versatile Disk), BD (Blu-ray (registered trademark) Disk), flash memory, and the like. It is a non-temporary recording medium.

The RAM 130 is a volatile storage means for temporarily storing programs, data, and the like read from the ROM 120. Various functions are realized by the CPU 110 reading a control program from the ROM 120 at startup, expanding the control program into the RAM 130, and executing the control program using the RAM 130 as a workspace.
The external I / F 140 connects the information processing device 100 and the external storage device 200. The input / output I / F 150 connects the information processing device 100 and the input / output device 180. The display I / F 160 connects the information processing device 100 and the display device 190.
The input / output device 180 is a means for inputting various operation instructions to the information processing device 100. The input / output device 180 is, for example, a keyboard, a mouse, a touch panel, various buttons, or the like. The display device 190 is a means for displaying an image input via the display I / F 160, and is, for example, a liquid crystal display, an organic EL (Electro Luminescence) display, or the like. The display device 190 may display information for accepting input from the touch panel.

The external storage device 200 stores various types of data such as encrypted data. The external storage device 200 is, for example, an HDD, an SSD, or the like. In the following, for the sake of brevity, the external storage device will be described as an SSD.
The external storage device 200 includes a controller 210, an SPI-ROM (Serial Peripheral Interface-ROM) 220, a DRAM (Dynamic Random Access Memory) 230, a flash memory array (storage means, non-volatile memory) 240, a host I / F 250, and a bus. It is equipped with 260. Each component is connected by bus 260. Further, the external storage device 200 may include an SRAM (Static Random Access Memory) (not shown). Then, the SRAM may store information even while it is connected to the battery and is not connected to the main power supply.

The controller 210 is, for example, a processor, and controls the operation of the entire external storage device 200 by using a program or the like stored in the SPI-ROM 220. The SPI-ROM 220 is a non-volatile storage means for storing various settings and a control program for causing the controller 210 to execute a process of controlling the entire external storage device 200. The SPI-ROM 220 is provided as a memory dedicated to the controller 210. The DRAM 230 is a volatile storage means for temporarily storing programs, various data, and the like read from the SPI-ROM 220.
The flash memory array 240 is a non-volatile storage means for storing encrypted data and various data transmitted from the information processing apparatus 100, and is composed of, for example, a NAND type flash memory array or a NOR type flash memory array. To.
The host I / F 250 connects the external storage device 200 and the information processing device 100.

[Functional configuration]
FIG. 3 is a block diagram showing a functional configuration of an external storage device according to an embodiment of the present invention.
The external storage device 200 includes a control unit 300, a temporary storage unit 410, a setting storage unit 420, and a storage unit 430.
The control unit 300 includes an overall control unit 310, a sequence control unit 320, an ECC control unit 330, a host I / F control unit 340, a memory I / F control unit 350, and a write control unit 360.

The control unit 300 is realized by the controller 210 of FIG. Each function of the control unit 300 is realized by the controller 210 reading the control program from the SPI-ROM 220, deploying it to the DRAM 230, and executing the control program using the DRAM 230 as a workspace.
The overall control unit 310 controls the entire control unit 300. The sequence control unit 320 controls the operation of the storage unit 430 in response to a command from the overall control unit 310. The ECC control unit 330 detects an error included in the read data by using the error collection code added to the read data. Further, when the ECC control unit 330 detects an error, the ECC control unit 330 corrects the error.
The host I / F control unit 340 controls the interface with the information processing device 100. The memory I / F control unit 350 controls an interface with a NAND / NOR array which is a storage unit 430, a DRAM which is a temporary storage unit 410, and the like.
The write control unit 360 controls the writing and reading of data to the storage unit 430. The detailed configuration of the write control unit 360 will be described later.

The temporary storage unit 410 is a volatile storage means for temporarily storing the data read from the storage unit 430. The temporary storage unit 410 is realized by the DRAM 230 of FIG.
The setting storage unit 420 is a non-volatile storage means for storing various information related to the status of the external storage device 200 and its change. The setting storage unit 420 shifts from the write-protected state to another state and the status of the external storage device 200 (any of the write-permitted state, the write-protected reserved state, and the write-protected state) related to whether or not the data can be written. The password (authentication information) required for the operation and the command (trigger command) that triggers the transition from the write-protected reservation state to the write-protected state are stored. Although the setting storage unit 420 is realized by the SPI-ROM 220 of FIG. 2, a part of the flash memory array 240 of FIG. 2 or an SRAM (not shown) may be used as the setting storage unit 420.
The storage unit 430 is a means for storing encrypted data and various types of data, and is realized by the flash memory array 240 of FIG.

<Write control unit>
The write control unit 360 will be described with reference to FIG.
The write control unit 360 includes a setting unit (setting means) 361, a status management unit (status management means) 362, and a writing unit 363.
The setting unit 361 has a password required for changing the status of the external storage device 200 in the write-protected state to the write-protected state or the write-protected reserved state, and the write-protected state from the write-protected reserved state. This is a means for storing a command (trigger command) that becomes a trigger for shifting to the setting storage unit 420. The password and the trigger command are input from the information processing apparatus 100 via the host I / F control unit 340.

The status management unit 362 is a means for managing the status of the external storage device 200. The status management unit 362 stores the status of the external storage device 200 in the setting storage unit 420 as, for example, 2-bit information. The status management unit 362 changes the status of the external storage device 200 to the write-protected state when the status of the external storage device 200 is in the write-protected reserved state and the input of the trigger command is detected from the information processing device 100. do. Further, the status management unit 362 changes the status of the external storage device 200 to the write permission state or the write prohibition reservation state when the permission command or the reservation command is input from the information processing device 100 together with the password. Further, the status management unit 362 responds with the current status of the external storage device 200 when the writing unit 363 inquires about whether or not the storage unit 430 can be written.
The writing unit 363 is a means for writing the data acquired from the information processing apparatus 100 to the storage unit 430. Based on the write command input from the information processing device 100, the writing unit 363 writes the data input from the information processing device 100 together with the writing command to the storage unit 430 according to the status of the external storage device 200. ..

The trigger command may be assigned one of the commands normally generally input from the information processing apparatus 100 to control the external storage device 200 or to cause the external storage device 200 to perform a specific operation. can.
Here, for the control of the external storage device 200 by the information processing device 100, a command corresponding to the specifications of the interface connecting both devices is used. For example, when the information processing device 100 and the external storage device 200 are connected by the SATA (Serial Advanced Technology Attachment) interface standard, the ATA command is used to control the external storage device 200. That is, when both devices are connected according to the SATA interface standard, any of the ATA commands can be used as a trigger command.

As the command constituting the trigger command, a command output from the information processing apparatus 100 after writing the data is generally preferable. For example, Flush_Cache or Standby_Immediate, which is output at shutdown after writing data, can be used for the trigger instruction. In this way, by using the command that is always output after writing the data as the trigger command, the storage unit 430 can be put into the write-protected state without forcing the user to perform a special operation.
The trigger command may be composed of a single command, or may be composed of a combination of a plurality of commands and their input order. When the trigger instruction is composed of a combination of a plurality of commands, the trigger instruction may be a plurality of commands in a predetermined order in succession or a plurality of commands input in a predetermined order intermittently.

[Setting processing, reservation processing]
FIG. 4 is a sequence diagram showing a setting process and a reservation process. The setting process is a process in which the setting unit 361 stores the password and the trigger command in the setting storage unit 420. The reservation process is a process in which the status management unit 362 changes the status of the external storage device 200 to the write-protected reservation state. As shown in FIG. 1, this process is, for example, a process performed by the manufacturer. The status of the external storage device 200 in the initial state is the write permission state.

First, the setting process will be described.
In step S401, the information processing apparatus 100 outputs a setting start command in which a password and a trigger command are specified as arguments.
In step S403, the setting unit 361 stores the password in the setting storage unit 420 based on the setting start command. Further, in step S405, the setting unit 361 stores the trigger instruction in the setting storage unit 420 based on the setting start instruction.
In step S407, the setting unit 361 responds to the information processing apparatus 100 via the overall control unit 310 that the setting is completed.
When the trigger instruction is fixed, it is possible to specify the trigger instruction as an argument in step S401 and omit the storage of the trigger instruction in step S405.

Next, the reservation process will be described.
In step S411, the information processing device 100 outputs a reservation command in which a password is specified as an argument to the external storage device 200.
In step S413, the status management unit 362 reads the password from the setting storage unit 420. In step S415, the status management unit 362 collates the read password with the password input from the information processing apparatus 100. When both passwords match, the status management unit 362 changes the status of the external storage device 200 to the write-protected reservation state. That is, the status management unit 362 stores the write-protected reservation state as the status of the external storage device 200 in the setting storage unit 420 (step S417).
In step S419, the status management unit 362 responds to the information processing apparatus 100 via the overall control unit 310 that the status change has been completed.

[Data writing processing, prohibition processing]
FIG. 5 is a sequence diagram showing data writing processing and prohibition processing. In the write process, the write unit 363 writes data to the storage unit 430, and in the prohibition process, the status management unit 362 changes the status of the external storage device 200 in the write-protected reserved state to the write-protected state. It is a process. This process is a process performed on the user side as shown in FIG.

In step S501, the information processing device 100 outputs a data writing command to the storage unit 430 and the data to be written to the external storage device 200.
In step S503, the writing unit 363 inquires the status management unit 362 whether or not the status of the external storage device 200 is a state in which data can be written.
In step S505, the status management unit 362 reads out the status of the current external storage device 200 stored in the setting storage unit 420. Further, in step S507, the status management unit 362 responds to the writing unit 363 with the read status (“write-protected reservation state” in this example).
In the write-protected reservation state, data can be written to the storage unit 430. Therefore, in step S509, the writing unit 363 executes a process of writing the data input from the information processing device 100 to the storage unit 430.
In step S511, the writing unit 363 responds to the information processing apparatus 100 via the overall control unit 310 with the data processing result (writing success).

After the writing of the necessary data is completed, the information processing apparatus 100 outputs an instruction to shut down the external storage apparatus 200 (step S513). At this time, the information processing device 100 outputs a trigger instruction (for example, Flush_Cache, Standby_Immediate) when shutting down the external storage device 200.
In step S515, since the status of the external storage device 200 is the write-protected reserved state, the status management unit 362 changes the status of the external storage device 200 to the write-protected state based on the input of the trigger command. That is, the status management unit 362 stores the write-protected state as the status of the external storage device 200 in the setting storage unit 420.
In step S517, the overall control unit 310 executes a process of turning off the power of the external storage device 200.

[Write processing in write-protected state]
FIG. 6 is a sequence diagram showing a data writing process in a write-protected state.
In step S601, the information processing device 100 outputs a data writing command to the storage unit 430 and the data to be written to the external storage device.
In step S603, the writing unit 363 inquires the status management unit 362 whether or not the data can be written.
In step S605, the status management unit 362 reads out the status of the current external storage device 200 stored in the setting storage unit 420. Further, in step S607, the status management unit 362 responds to the writing unit 363 with the read status (“write-protected state” in this example).
In the write-protected state, data cannot be written to the storage unit 430. Therefore, in step S609, the writing unit 363 responds to the information processing apparatus 100 via the overall control unit 310 with the data processing result (writing error).

[Permission processing]
FIG. 7 is a sequence diagram showing the permission process. The permission process is a process in which the status management unit 362 changes the status of the external storage device 200 to the write permission state. As shown in FIG. 1, this process is, for example, a process performed by the manufacturer. The status management unit 362 similarly executes the process of changing the status of the external storage device 200 from the write-protected state to the write-protected state and the process of changing the write-protected reserved state to the write-protected state. Ru.

In step S701, the information processing device 100 outputs a permission command in which a password is specified as an argument to the external storage device 200.
In step S703, the status management unit 362 reads the password from the setting storage unit 420. In step S705, the status management unit 362 collates the read password with the password input from the information processing apparatus 100. When both passwords match, the status management unit 362 changes the status of the external storage device 200 to the write permission state. That is, the status management unit 362 stores the write permission state as the status of the external storage device 200 in the setting storage unit 420 (step S707).
In step S709, the status management unit 362 responds to the information processing apparatus 100 via the overall control unit 310 that the status change has been completed.

[Modification example]
Hereinafter, various modification examples will be described.
<Modification 1>
The trigger command can be a combination of a data writing command to the external storage device 200 and a command output from the information processing device 100 after writing the data. By including the write command in the command constituting the trigger command, the external storage device 200 shifts to the write-protected state after the data is written. Therefore, it is possible to prevent the external storage device 200 from being in a write-protected state before writing the data.

<Modification 2>
The status management unit 362 may change the status of the external storage device 200 from the write-protected reserved state to the write-protected state when an instruction functioning as a trigger for changing the status is input a predetermined number of times.
In this case, the trigger command is represented by a command input from the information processing apparatus 100 and the number of times the command is input. That is, the setting unit 361 stores the command functioning as a trigger for changing the status and the number of inputs thereof in the setting storage unit 420. Further, the status management unit 362 stores the number of commands functioning as a trigger input under the write-protected reservation state in the setting storage unit 420, and the number is stored each time the command functioning as a trigger is input. Increment.

<Modification 3>
The status management unit 362 may change the operation related to the status change of the external storage device 200 according to the status of the external storage device 200 when the power of the external storage device 200 is turned on.
For example, the status management unit 362 changes the status of the external storage device 200 to the write-protected state when the status of the external storage device 200 at the time of turning on the power is in the write-protected reserved state and a trigger command is input. can do. Conversely, when the external storage device 200 is in a state other than the write-protected reservation state when the power is turned on, and the status management unit 362 changes the status of the external storage device 200 to the write-protected reservation state, the status management unit 362 Can prevent the status of the external storage device 200 from being changed to the write-protected state even if a trigger command is output at the time of shutdown immediately after that.
By doing so, it is possible to limit the transition from the write-protected reserved state to the write-protected state, and it is possible to prevent the external storage device 200 from being in the write-protected state before writing data.

<Modification example 4>
In the above embodiment, the command (trigger command) input from the information processing apparatus 100 is used as a trigger for shifting from the write-protected reserved state to the write-protected state, but a command other than a specific command is write-protected. It can be used as a trigger to move to the state. For example, a trigger for changing the status of the external storage device 200 from the write-protected reserved state to the write-protected state for an operation selected from the operations that can be executed by the storage device 200 based on a command from the information processing device 100 . It can be used as (trigger operation).

<Modification 5>
The status management unit 362 may shift the status of the external storage device 200 from the write-protected reservation state to the write-protected state by using a predetermined amount of data written in the storage unit 430 as a trigger. ..
That is, the setting unit 361 issues a write command (or write operation) for writing a predetermined amount or more of data to the storage unit 430 at one time or in a plurality of times from the write-protected reservation state to the write-protected state. It can be set as a trigger command (or trigger operation) to shift to.

<Modification 6>
The status management unit 362 may manage the status of the external storage device 200 for each small area in which the area in the storage unit 430 is divided into a plurality of areas. That is, the status management unit 362 sets and stores whether the status of the external storage device 200 for each small area of the storage unit 430 is a write permission state, a write prohibition reservation state, or a write prohibition state. Each unit 420 can be stored. In this case, the setting unit 361 writes the data writing operation for each small area executed by the writing unit 363 based on the instruction from the information processing apparatus 100, and the status of each small area is write-protected from the write-protected reserved state. It can be set as a trigger (trigger operation) to change to the state. Further, the status management unit 362 changes the status of each small area to the write-protected state when data is written to each small area (trigger operation is executed).
By managing the status for each small area in this way, every time a certain amount of data is written to the storage unit 430, the area in which the data is written is sequentially shifted from the write-protected reserved state to the write-protected state. Can be made to. That is, it is possible to function as a storage device in which only the area in which data is written can be written only once.

<Modification 7>
In the above embodiment and each modification, an example of changing the status of the external storage device 200 related to writing data to the storage unit 430 by a trigger command is shown, but the status changed by the trigger command is not limited to this. .. For example, a trigger command may be used to change the status related to reading data from the storage unit 430.
As described above, the status management unit 362 is in the operation restriction reserved state in which the status of the external storage device 200 is reserved to limit the specific operation of the external storage device 200, and the trigger command is input. , The status of the external storage device 200 may be changed to an operation restriction state that limits a specific operation of the external storage device 200.

[Second embodiment]
FIG. 8 is a state transition diagram of the external storage device according to the second embodiment of the present invention.
The external storage device according to the second embodiment has a one-time program state (a state in which write operation is possible in a limited manner) in addition to a write permission state, a write prohibition state, and a write prohibition reservation state. It is characterized by the fact that it transitions between four stats.
The one-time program state means a state in which the external storage device is performing a write operation that can be executed only once, or a state in which such a write operation is possible.
The external storage device is in the write-protected reserved state, and when the first data writing process is executed, the external storage device transitions to the one-time program state (transition D). When the external storage device is in the one-time program state and a reset signal for resetting the entire external storage device is output, the external storage device transitions to the write-protected state (transition A2). The reset signal is output, for example, when the power of the external storage device is turned on.
After the external storage device transitions to the one-time program state, the external storage device can execute a data writing operation until a reset signal is output. That is, "the writing operation can be executed only once" means that the writing operation can be executed many times until the reset signal is output after the transition to the one-time program state. be. When using the reset signal when the power is turned on for the reset signal, it is necessary that the power of the external storage device is turned off in advance, so in reality, data writing is performed from the start of the writing operation. Limited to being turned off.

FIG. 9 is a hardware configuration diagram showing an information processing device and an external storage device according to a second embodiment of the present invention. The description of the same configuration as that of FIG. 2 will be omitted.
The external storage device 200 includes a reset IC 270 in addition to the configuration shown in FIG. The reset IC 270 is a reset-dedicated control circuit that generates and outputs a reset signal for resetting the entire external storage device 200 when the power is turned on. The reset signal resets the controller 210 and initializes the volatile memories such as the host I / F250 and the DRAM 230.

10 (a) and 10 (b) are sequence diagrams showing a flow from data writing processing to prohibition processing. FIG. 10A is a diagram showing a flow from data writing processing to power off, and FIG. 10B is a diagram showing a flow from power on to prohibition processing. The same configuration as in FIG. 5 will be omitted as appropriate.
Steps S1001 to S1007 shown in FIG. 10A are the same as steps S501 to S507 shown in FIG.
In step S1009, the writing unit 363 writes the data input from the information processing device 100 to the storage unit 430. Here, the writing unit 363 may write the entire data to be written to the storage unit 430 at one time, or may divide the data to be written into a plurality of parts and sequentially write the divided data. When the data to be written by the writing unit 363 is divided into a plurality of pieces and written, the process of step S1011 is executed after the writing unit 363 writes one of the divided data to the storage unit 430. In the following, an example in which the writing unit 363 divides the data into a plurality of pieces and writes the data to the storage unit 430 will be described.
In step S1011, the writing unit 363 notifies the status management unit 362 that the data has been written.
In step S1013, since the status of the external storage device 200 is the write-protected reserved state, the status management unit 362 sets the status of the external storage device 200 to the one-time program state based on the write notification from the write unit 363. Change to. That is, the status management unit 362 stores the one-time program state as the status of the external storage device 200 in the setting storage unit 420.
In step S1015, the writing unit 363 writes the next divided data to the storage unit 430. The writing unit 363 repeats the process of step S1015 until the entire data to be written is written in the storage unit 430.
In step S1017, the writing unit 363 responds to the information processing apparatus 100 via the overall control unit 310 with the data processing result (writing success).
In step S1019, the information processing device 100 outputs an instruction to shut down the external storage device 200.
In step S1021, the overall control unit 310 executes a process of turning off the power of the external storage device 200.

When the power of the external storage device 200 is turned on, a reset signal is output from the reset IC 270 shown in FIG. After the external storage device 200 is reset by the reset signal, the controller 210 reads the control program from the SPI-ROM 220 and expands it to the DRAM 230 to form each block shown in the control unit 300 of FIG. The process shown in FIG. 10B is executed immediately after the formation of each block.
In step S1023, the status management unit 362 reads out the status of the current external storage device 200 stored in the setting storage unit 420. When the status of the external storage device 200 is any of the write-permitted state, the write-protected state, and the write-protected reserved state, the status is not changed. When the status of the external storage device 200 is the one-time program state, the process of step S1025 for changing the status is executed.
In step S1025, the status management unit 362 changes the status of the external storage device 200 to the write-protected state. That is, the status management unit 362 stores the write-protected state as the status of the external storage device 200 in the setting storage unit 420.

Also in this embodiment, the setting process and the reservation process (FIG. 4) are executed in the same manner as in the first embodiment. However, since the trigger command is not used to change the status to the write-protected state in this embodiment, it is not necessary to specify the trigger command as an argument to the setting start command in step S401 of FIG. Further, the process of step S405 for storing the trigger instruction is omitted.
Also in this embodiment, commands such as Flush_Cache and Standby_Immediate are output from the information processing apparatus 100 at the time of shutdown (step S1019 in FIG. 10A) as in the first embodiment. However, since the above command is not set as a trigger command in this embodiment, the external storage device 200 only executes an operation according to the above command.
The writing process and the permission process in the write-protected state are the same as those in the first embodiment.

In the present embodiment, data can be written as many times as necessary from the start of the writing operation to the output of the reset signal. Therefore, it is possible for the writing unit 363 to divide the data to be written to the storage unit 430 into a plurality of pieces and sequentially execute writing and verifying for each of the divided data. Of course, it is also possible to write a plurality of data to the external storage device 200 based on a plurality of write commands output from the information processing device 100. As described above, according to the present embodiment, it is possible to avoid a situation in which the state transitions to the write-protected state even though the data to be written remains after the execution of the first write operation.

Generally, an electronic circuit is configured to prevent a malfunction by forcibly returning (or putting into a specific state) the circuit to the initial state when the power is turned on. In the present embodiment, the reset function of a general electronic circuit is used to change the status. That is, when the status of the external storage device is in the one-time program state and the state of the internal circuit is forcibly returned to the initial state (or when it becomes a specific state) by the reset signal, the external storage device Transition the status to the write-protected state. In the present embodiment, the reset signal is output from the reset IC 270 dedicated to reset, but the reset signal may be output from the resistor and the capacitor.
Although the second embodiment has been described with reference to an example of outputting a reset signal when the power is turned on, a configuration may be used in which a reset signal is output when the power is turned off. In this case, even after the power supply from the power supply is stopped after the output of the reset signal, the power required to execute step S1023 and step S1025 shown in FIG. 10B is supplied to the controller 210 and SPI-. It is configured so that it can be supplied to ROM 220 and DRAM 230 (FIG. 2). Specifically, a member that functions as a second power source, such as an electric element such as a supercapacitor or a secondary battery having a very small capacity, is interposed between the power supply circuit and the controller 210 or the like.
The reset signal may be output by artificially operating the reset button provided on the external storage device 200.
In the present embodiment, the reset signal is used as the trigger signal for transitioning from the one-time program state to the write-protected state, but a signal other than the reset signal may be used as the trigger signal. For example, a specific signal input from the information processing device 100 may be used as a trigger signal, or a specific signal output in the external storage device 200 based on a command from the information processing device 100 may be used as a trigger signal. You may use it. Further, the controller 210 may use a specific signal generated by detecting the power-on of the external storage device 200.

An example in which the modified example 2 is applied to the second embodiment will be supplemented.
The status management unit 362 changes the status of the external storage device 200 from the write-protected reservation state to the one-time program state when the reset signal is input a predetermined number of times after the transition to the write-protected reservation state. You may. In this case, the setting unit 361 stores in the setting storage unit 420 the specified number of times of output of the reset signal required from the transition to the write-protected reservation state to the transition to the one-time program state. The specified number of outputs of the reset signal can be stored in the information processing apparatus 100.
The status management unit 362 sets the specified number of reset signal outputs in the setting storage unit 420 as the number of reset signal outputs required for the transition to the one-time program state when the write-protected reservation state is entered. .. The status management unit 362 decrements the required number of reset signal outputs each time a reset signal is output, in other words, each time the external storage device 200 is activated. The status management unit 362 changes the status of the external storage device 200 to the one-time program state when the number of output of the required reset signal becomes zero. When transitioning from the write-protected reservation state to the write-permitted state, the number of output reset signals required to be managed by the status management unit 362 is cleared.

The embodiments and modifications described above can be appropriately combined and carried out as long as there is no contradiction.
In the above-described embodiment and modification, a password is required when shifting from the write-protected state to another state, but as a method of confirming whether or not there is an authority to change from the write-protected state to another state, a PIN code is used. , USB key, dongle, etc., various authentication information can be used.

[Summary of Examples of Embodiments of the Present Invention, Actions, and Effects]
<First embodiment>
This aspect is a storage device (external storage device 200) that executes writing of data input from the information processing device based on a command from the information processing device 100, and is a storage means (storage unit 430) for storing the data. ), A status management means for managing the status of the storage device (status management unit 362), and a setting means for setting a command selected from the commands that can be input from the information processing device as a trigger command for changing the status (). The setting unit 361) is provided. Then, the status management means prohibits the writing of the data to the storage means when the status is in the write-protected reserved state in which the write-protection of the data to the storage means is reserved and the trigger command is input. It is characterized by changing to a write-protected state.

This aspect is characterized by a configuration in which a write-protected reservation status is provided. The write-protected reserved state is a state in which data can be written to the storage means, but it is planned to shift to the write-protected state on condition that a trigger command is input, and in that sense, data is written. There are certain restrictions on the data. The storage device is shipped to the user with the status set to the write-protected reserved state on the manufacturer side.
The command that can be input from the information processing device is a command input from the information processing device in order to control the storage device or to cause the storage device to perform a specific operation, and the information processing device and the storage device are input. This command is usually used depending on the specifications of the interface to be connected. In this way, by using at least one of the commonly used commands as a trigger instruction, the storage device transitions to the write-protected state only by the user using the storage device as usual. The user can use the external storage device as a storage device that can write only once without being aware of either the status of the storage device or the instruction for transitioning to the write-protected state. Also, the user does not need to know how to return the status of the storage device to a state in which data can be written (for example, a command or a password).
According to this aspect, it is possible to prevent fraudulent acts due to falsification of data.

<Second embodiment>
In the storage device (external storage device 200) according to this embodiment, the trigger command includes a command input from the information processing device 100 when the storage device is shut down.
According to this aspect, by using a command that is always output after writing data as a trigger command, it is possible to put the storage device in a write-protected state without forcing a user to perform a special operation.

<Third embodiment>
In the storage device (external storage device 200) according to this embodiment, the trigger command is represented by a plurality of commands that can be input from the information processing device 100 and the input order of the commands.
The trigger instruction may be composed of a single instruction, or may be composed of a plurality of instructions. When the trigger instruction is composed of a plurality of instructions, the order may be specified. Of course, the trigger instruction may be a plurality of consecutive instructions in a predetermined order, or a plurality of instructions intermittently input in a predetermined order.

<Fourth and fifth embodiments>
In the storage device (external storage device 200) according to this embodiment, the setting means (setting unit 361) sets authentication information (password) for changing the status from the write-protected state. Then, the status management means (status management unit 362) writes the status to allow writing of data to the storage means (storage unit 430) when the status change command for changing the status and the authentication information are input. It is characterized in that the writing of data to the permitted state or the storage means is permitted, but the transition to the write-protected state is changed to the reserved write-protected state.

The storage device in this embodiment has three statuses related to data writing: a write permission state, a write prohibition reserved state, and a write prohibition state. The write permission state is a state in which there is no restriction on data writing, and even if a trigger command is input, the state does not shift to the write prohibition state. The write-protected reserved state is different from the write-protected state in that data can be written to the storage means, but it is planned to shift to the write-protected state on condition that a trigger command is input.
Three statuses are prepared for the storage device, and the manufacturer located upstream of the distribution of the storage device carries out the transition to the write permission state and the write prohibition reservation state, and the write prohibition reservation state is changed to the write protection reservation state. If the migration is performed by a user located downstream of the distribution of the storage device, the method for enabling the writing of data to the storage device in the write-protected state is less likely to be leaked. Therefore, it becomes difficult to falsify the data written in the storage means.
Further, according to this aspect, the storage means can be changed from the write-protected state to the write-protected state or the write-protected reserved state. Therefore, while operating the storage device as a storage device that can be written only once under certain conditions, the storage device can be reused as a medium on which data can be written.

<Sixth Embodiment>
This aspect is a storage device (external storage device 200) that executes writing of data input from the information processing device based on a command from the information processing device 100, and is a storage means (storage unit 430) for storing the data. ), The status management means for managing the status of the storage device (status management unit 362), and the operation selected from the operations that can be executed based on the command from the information processing device, as the trigger operation for changing the status. A setting means (setting unit 361) for setting is provided. Then, the status management means prohibits the writing of the data to the storage means when the status is in the write-protected reserved state in which the write-protection of the data to the storage means is reserved and the trigger operation is executed. It is characterized by changing to a write-protected state.
This embodiment differs from the first embodiment in that a trigger operation is used instead of the trigger command, but this embodiment has the same effect as the first embodiment.

<Seventh Embodiment>
This aspect is a storage device (external storage device 200) that executes writing of data input from the information processing device based on a command from the information processing device 100, and is a storage means (storage unit 430) for storing the data. ), And a status management means (status management unit 362) for managing the status of the storage device. Then, the status management means sets the status when the status is in the write-protected reservation state in which the write-protection of the data to the storage means is reserved and the trigger signal is generated after the data is written to the storage means. , The feature is to change to a write-protected state that prohibits writing of data to the storage means.

This aspect is characterized by a configuration in which a write-protected reservation status is provided. The write-protected reserved state is a state in which data can be written to the storage means, but it is planned to shift to the write-protected state on condition that a trigger signal is input, and in that sense, data is written. There are certain restrictions on the data. The storage device is shipped to the user with the status set to the write-protected reserved state on the manufacturer side.
In this embodiment, since the data is written to the storage means and then transitioned to the write-protected state by the trigger signal, the transition to the write-protected state is performed before the data is written, or the data is written in the middle of writing. It is possible to prevent the transition to the entry prohibition state.
The trigger signal can be a reset signal output when the power is turned on or turned off. Generally, an electronic circuit is configured to prevent a malfunction by outputting a reset signal when the power is turned on or the like to forcibly return the circuit to the initial state (or to put it in a specific state). As described above, by using a signal that is generally output as a trigger signal, the storage device transitions to the write-protected state only by the user using the storage device as usual. The user can use the external storage device as a storage device that can write only once without being aware of either the status of the storage device or the instruction for transitioning to the write-protected state. Also, the user does not need to know how to return the status of the storage device to a state in which data can be written (for example, a command or a password).
According to this aspect, it is possible to prevent fraudulent acts due to falsification of data.

<Eighth and nine embodiments>
The trigger signal can be a reset signal that resets the entire storage device (external storage device 200). Further, the trigger signal can be a signal output when the power of the storage device is turned on or turned off.
The reset signal may be output from a reset IC or a reset circuit provided in the storage device at a predetermined timing, or may be output by artificially operating a reset button provided in the storage device. The trigger signal may be a signal other than the reset signal.
Generally, an electronic circuit is configured to prevent a malfunction by outputting a reset signal when the power is turned on or the like to forcibly return the circuit to the initial state (or to put it in a specific state). That is, it is considered that all the data to be written in the storage means has already been written in the storage means at the time when the power is turned off in the normal use state or when the power is turned on after the power is turned off.
In the present embodiment, the reset signal or the signal output when the power is turned on or off is used as a trigger signal for transitioning to the write-protected state, so that the write-protected state is reached before the data is written. It is possible to prevent the transition to the write-protected state or the transition to the write-protected state during the writing of data.

<10th embodiment>
In the status management means (status management unit 362), when the status of the storage device (external storage device 200) is in the write-protected reserved state and at least a part of the data is written to the storage means (storage unit 430). It is characterized by changing the status to a one-time program state that allows writing of data until a trigger signal is generated.
Since data writing is permitted until a trigger signal is generated, a write-protected state may be entered before the data writing is executed, or a write-protected state may be entered during data writing. Can be prevented.

100 ... Information processing device, 110 ... CPU, 120 ... ROM, 130 ... RAM, 140 ... External I / F, 150 ... Input / output I / F, 160 ... Display I / F, 170 ... Bus, 180 ... Input / output device, 190 ... Display device, 200 ... External storage device (storage device), 210 ... Controller (processor), 220 ... ROM, 230 ... DRAM, 240 ... Flash memory array (storage means, non-volatile memory), 250 ... Host I / F 260 ... Bus, 270 ... Reset IC, 300 ... Control unit, 310 ... Overall control unit, 320 ... Sequence control unit, 330 ... ECC control unit, 340 ... Host I / F control unit, 350 ... Memory I / F control unit 360 ... Write control unit, 361 ... Setting unit (setting means), 362 ... Status management unit (status management means), 363 ... Writing unit (writing means), 410 ... Temporary storage unit, 420 ... Setting storage unit (Setting storage means) 430 ... Storage unit (storage means, non-volatile memory)

Claims (18)

A storage device that writes data input from an information processing device.
A storage means for storing the data and
A setting storage means for storing the status of the storage device and an instruction selected for functioning as a trigger for changing the status of the storage device from among the commands that can be input to the storage device as a trigger instruction.
When the status of the storage device is set to the write-protected reserved state reserved for writing prohibition of the data to the storage means and the trigger command is input, the status is set to the storage means. Status management means to change to a write-protected state that prohibits writing of data,
A storage device characterized by comprising. The storage device according to claim 1, wherein the trigger command includes a command input to the storage device when the storage device is shut down. The storage device according to claim 1 or 2, wherein the trigger command is represented by a plurality of commands that can be input to the storage device and the input order of the commands. The storage device according to claim 1, wherein the trigger command is composed of a command for writing the data to the storage device and a command to be input to the storage device after writing the data. The storage device according to claim 1, wherein the trigger command is represented by an command that can be input to the storage device and the number of times the command is input required for the command to function as the trigger. .. The status management means changes the status to the write-protected state when the status is in the write-protected reserved state when the power of the storage device is turned on and the trigger command is input. The storage device according to claim 1. The trigger command is characterized by being represented by a write command for writing data to the storage means and a total amount of the data written to the storage means based on the write command once or a plurality of times. The storage device according to claim 1. A storage device that writes data input from an information processing device.
A storage means for storing the data and
Setting storage for storing the status of the storage device and the trigger operation selected to function as a trigger for changing the status of the storage device from the operations that can be executed based on the command from the information processing device. Means and
When the status of the storage device is set to the write-protected reserved state reserved for prohibiting writing of the data to the storage means, and the trigger operation is executed, the status is set to the storage means. A status management means for changing to a write-protected state that prohibits writing of the data, and
A storage device characterized by comprising. The storage device according to claim 8, wherein the status management means manages the status of the storage device for each small area obtained by dividing the area of the storage means into a plurality of small areas. A storage device that writes data input from an information processing device.
A storage means for storing the data and a status management means for changing the status of the storage device are provided.
The status management means is
When the status of the storage device is in the write-protected reservation state in which the write-protection of the data to the storage means is reserved and the initial write processing of the data is executed, the status is set as a trigger signal. Change to the one-time program state that allows writing of the data until
When the status of the storage device is in the one-time program state and the trigger signal is generated after writing the data to the storage means, the status is prohibited from writing the data to the storage means. A storage device characterized by changing to a write-protected state. The storage device according to claim 10 , wherein the trigger signal is a reset signal that resets the entire storage device. The storage device according to claim 10 or 11 , wherein the trigger signal is a signal output when the power of the storage device is turned on or off. Any of claims 1 to 12 , wherein the status management means changes the status to the write-protected reserved state when the status change order for changing the status and the authentication information are input. The storage device according to one item. The status management means changes the status to a write permission state that permits writing of the data to the storage means when a status change command for changing the status and authentication information are input. The storage device according to any one of claims 1 to 13 . A status management method executed by a processor of a storage device having a storage means for storing data and a setting storage means for storing settings .
A step of storing the status of the storage device and a trigger command selected to function as a trigger for changing the status of the storage device from the commands that can be input to the storage device in the setting storage means.
When the status of the storage device is in the write-protected reservation state reserved for writing prohibition of the data to the storage means and the trigger command is input, the status is set to the data for the storage means. Steps to change to a write-protected state that prohibits writing, and
A status management method characterized by running. In a processor of a storage device having a storage means for storing data and a setting storage means for storing settings ,
The setting storage means stores the status of the storage device and a trigger command selected to function as a trigger for changing the status of the storage device from among the commands that can be input to the storage device.
When the status of the storage device is in the write-protected reservation state reserved for writing prohibition of the data to the storage means and the trigger command is input, the status is set to the data for the storage means. Change to write-protected state, which prohibits writing
A status management program characterized by executing processing. A status management method performed by a processor of a storage device having a storage means for storing data.
When the status of the storage device is in the write-protected reservation state in which the write-protection of the data to the storage means is reserved and the initial write processing of the data is executed, the status is set as a trigger signal. To change to a one-time program state that allows writing of the data until
When the status of the storage device is in the one-time program state and the trigger signal is generated after writing the data to the storage means, the status is prohibited from writing the data to the storage means. The step to change to the write-protected state and
A status management method characterized by running. In a processor of a storage device having a storage means for storing data,
When the status of the storage device is in the write-protected reserved state in which the write-protected data is reserved and the first write process of the data is executed, the status is set to the trigger signal until the trigger signal is generated. The process of changing to the one-time program state that permits the writing of the data is executed, and the process is executed.
When the status of the storage device is in the one-time program state and the trigger signal is generated after writing the data to the storage means, the status is prohibited from writing the data to the storage means. A status management program characterized by executing a process of changing to a write-protected state.

Images