JPH11249966A - Information storage device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent an unspecified person from observing information stored in an information storage device even in a state of being detached from a computer. SOLUTION: In an information storage device 1 provided with a non-volatile storage medium 6, the medium 6 is provided with an information access permission/inhibition flag 6A and a password storage area 6B. By this arrangement, permission or inhibition of information write to and read from the non- volatile storage medium 6 is determined by only an information access right setting command accompanied with password information. Therefore, once information access off is set to the information storage device 1, an information read/write command results in error response even if the single body of the information storage device is taken out and is connected to another computer, and information read from and write to the information storage device is impossible.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an information storage device, and more particularly, to an information storage device capable of improving the security of an information storage medium.

[0002]

2. Description of the Related Art Information handled by a computer requires confidentiality. For this reason, conventionally, generally, in a stationary computer device, an information storage device is installed in a physically secure place, and further, confidentiality of information is ensured by referring to a password or encrypting information. ing.

[0003] For example, Japanese Patent Application Laid-Open No. 8-138307 discloses a technique for improving the security of an information storage medium incorporated in a cartridge of an information storage device detachably attached to a computer main body. Is described. FIG. 6 is a block diagram showing an example of a conventional information storage device for improving security.

The information storage device (HDD unit) 50 is
A cartridge 52 detachably attached to the computer main body 51 via the connectors A and B;
Consists of The cartridge 52 has a built-in recording disk (not shown) for recording information. The information storage device 50 includes a switch circuit 53 for inhibiting reading and writing operations of information on the recording disk, and a computer main body 5.
1 and a lock mechanism 55 that activates a switch circuit 53 as information read / write prohibiting means in response to a detection signal transmitted from the removal detection circuit 54.
And

The switch circuit 53 includes an R / W amplifier 56
And the driver circuit 57 are connected. The lock mechanism 55 is connected to an unlocking device 58 for unlocking, and the unlocking device 58 further includes
The lock circuit 59 and the ROM 60 are connected to each other.
Further, the lock mechanism 55 is provided with a lock non-operation switch 61 for preventing the lock mechanism 55 from operating.

[0006]

However, this conventional information storage device has the following problems. A first problem is that information can be easily obtained from an information storage device connected to a computer. The reason is that this information storage device does not have a function of invalidating information access to the information storage device when connected to a computer.

[0007] The second problem is that even if the information is encrypted, it can be analyzed. This information storage device is not provided with a function of invalidating the reading of the encrypted information itself. Therefore, the encrypted information itself can be easily read. If only the encrypted information can be extracted, the cryptanalysis can be performed in a relatively short time at the processing speed of today's computers.

[0008] In addition to the information storage device shown in FIG. 6, many information storage devices have been proposed so far. For example,
Japanese Patent Laying-Open No. 61-23261 proposes a volume security processing method characterized by holding a unique ID in a recording medium. Japanese Patent Application Laid-Open No. Sho 62-152898 proposes an IC card in which a memory is provided in an IC card and codes required for access are stored in the memory.

Further, Japanese Patent Application Laid-Open No. 2-61751 discloses that
A user verification method in which the usage right information of a subsystem is stored in a portable storage medium is proposed. JP-A-3-6639
The publication proposes an information processing apparatus including first and second storage media and storing all or a part of information necessary for accessing the first storage medium in the second storage medium.

[0010] However, the above problems cannot be solved by the devices proposed in these publications. The present invention has been made to solve the problems in the conventional information storage device as described above,
An information storage device that is not attached to a computer or is detached from a computer so that an unspecified person cannot view information stored in the information storage device. The purpose is to provide.

[0011]

To achieve the above object, according to the present invention, there is provided an information storage device including at least a nonvolatile storage medium, wherein the nonvolatile storage medium includes an information access enable / disable flag. , A password storage area, and information read / write of already stored information and writing of new information are set by an information access right setting command accompanied by password information. A storage device is provided.

In this information storage device, whether or not information can be written to or read from the information storage device is determined only by the information access right setting command accompanied by the password information. For this reason, once the setting value of the information access permission flag of the information storage device is set to off, even if the information storage device itself is taken out and connected to another computer, the information reading is performed. -An error response is returned to the write command, and reading / writing of information in the information storage device cannot be performed. Only after the setting value of the information access permission / inhibition flag is set to ON by the information access right setting command accompanied by the password information, the information in the information storage device can be read and written again.

As described above, according to the present information storage device, the information access permission / inhibition flag and the function of storing / inquiring the password are provided, so that even if the information storage device alone is removed, the information storage device is stored in the information storage device. It is possible to obtain an effect that the unspecified other person cannot see the information. Claim 2 is a nonvolatile storage medium having an information access permission flag and a password storage area, an external interface controller for decomposing an external signal into information and a command, and turning on or off the information access permission flag. An information access right setting command that can be set, a firmware having a program for a password setting command that can set a password, firmware, the information and the command are received from the external interface controller, and the command is received according to the program. Interpretation, a hard disk controller that reads information from the non-volatile storage medium, or writes information to the non-volatile storage medium,
An information storage device comprising the nonvolatile storage medium, the external interface controller, the firmware, and an internal bus interconnecting the hard disk controller is provided.

According to the information storage device of the second aspect,
The same operation and effect as those of the information storage device according to claim 1 can be obtained. Preferably, the information storage device further includes a controller connected to the nonvolatile storage medium. In this case, reading of information from the nonvolatile storage medium and writing of information to the nonvolatile storage medium are performed via the controller.

[0015] Further, as described in claim 4,
The information storage device preferably includes a memory for temporarily storing information read from the non-volatile storage medium or information to be written to the non-volatile storage medium. Further, the information storage device according to the present invention can be attached to the computer in a form that cannot be detached from the computer, but it is preferable that the information storage device be detachable from the computer.

A sixth aspect of the present invention provides an information storage system using the above information storage device. An information storage system according to claim 6, which is an information storage system including any one of the above information storage media and a computer connected to the information storage medium, wherein the computer stores the information in the password storage area. A second non-volatile storage medium in which the same password as the stored password is stored, a first power-off flag for turning on or off a power supply for supplying power to the computer, and a power supply in the information storage medium. And a second power-off flag for setting on / off of a power supply for supplying power.

For example, at the time of transition from the normal mode to the power saving mode, the computer sets the information access permission flag of the information storage device to off, and then sets the second power off flag to off. Alternatively, at the time of transition from the power saving mode to the normal mode, after the computer sets the second power-off flag to ON, that is, after supplying power to the information storage device, the information access permission flag of the information storage device is turned on. Set to. As described above, when the computer is in the power saving mode, the information access permission flag of the information storage device is set to off even if the operator is not conscious, and it becomes impossible to retrieve the information in the information storage device. The confidentiality of the information is maintained.

[0018]

FIG. 1 is a block diagram of an embodiment of an information storage device according to the present invention. As shown in FIG.
The information storage device 1 is detachably connected to a computer 8 via an IDE bus 7. The information storage device 1 includes:
Hard disk controller (HDC) 2, memory 3,
An external interface controller 4, a data I / O controller 5, and a firmware (F / W) 10 are provided, and these are mutually connected via an internal bus 9.

The nonvolatile storage medium 6 stores information. The nonvolatile storage medium 6 is provided with an information access flag 6A indicating whether access to information stored in the nonvolatile storage medium 6 is permitted and a password storage area 6B for storing a password. .
Writing of information to the nonvolatile storage medium 6 and reading of information from the nonvolatile storage medium 6 are performed by data I / O.
It is controlled by the controller 5.

The firmware 10 is a program for an information access right setting command for setting the information access permission flag 6A of the nonvolatile storage medium 6 on / off and a password setting command for setting a password stored in the password storage area 6B. Is stored inside. The external interface controller 4 has an IDE
It is connected to the bus 7 and decomposes signals on the IDE bus 7 into information and commands. The obtained information and command are transmitted to the hard disk controller (HDC) via the internal bus 9.
Sent to 2.

Hard Disk Controller (HDC) 2
Interprets a command received from the external interface controller 4 according to a program stored in the F / W 10, stores information in the nonvolatile medium 6 through the data I / O controller 5, or outputs information from the nonvolatile medium 6. Is read. At this time, the memory 3 is used as a temporary save place for information to be read / written.
The information read from the nonvolatile medium 6 is converted into a signal on the IDE bus 7 by the external interface controller 4 and output to the computer 8.

Next, the operation of the information storage device 1 shown in FIG. 1 will be described below. As described above, the nonvolatile storage medium 6 is provided with the information access permission flag 6A and the password storage area 6B.
Stores programs for an information access right setting command for setting the information access permission flag 6A on / off and a password setting command for setting a password. However, the factory setting of the information storage device 1 is such that the information access permission flag 6A is ON (information access is possible) and the password is not set.

The password setting command is sent to the computer 8
The password setting command includes a password before setting and a new password as password information. The new password is stored in the nonvolatile storage medium 6 only when the pre-setting password attached to the password setting command matches the password already written in the password storage area 6A of the nonvolatile storage medium 6. This is described in area 6A.

However, if a password has not yet been set in the password storage area 6A of the nonvolatile storage medium 6 as at the time of shipment of the information storage device, the new password is unconditionally stored in the password storage area of the nonvolatile storage medium 6. This is described in area 6A. The information access right setting command is also issued by the computer 8. This information access right setting command is accompanied by flag setting value information for setting the setting value of the information access permission flag 6A to ON or OFF and password information, and is attached to the information access right setting command. The password indicated by the password information and the password storage area 6 of the nonvolatile storage medium 6
Only when the password already described in A matches the password, the setting value of the information access permission flag 6A is rewritten to the setting value indicated by the flag setting value information attached to the information access right setting command.

However, if the password has not yet been set in the password storage area 6B of the nonvolatile storage medium 6, the set value of the information access permission flag 6A is not changed and is kept on. The information access right setting command returns an error status to the computer 8. Hereinafter, a command operation of the information storage device 1 when a password is already set in the password storage area 6B will be described with reference to FIG.

The information storage device 1 receives a command issued by the computer 8 (Step 201). Next, the information storage device 1 determines whether the command corresponds to an information access right setting command (step 20).
2). If the command from the computer 8 does not correspond to the information access right setting command, the information storage device 1 executes the processing of the command (step 203).

If the command from the computer 8 corresponds to the information access right setting command, the information storage device 1
Determines whether the set value of the information access permission flag 6A at that time is ON (step 204). When the setting value of the information access permission flag 6A is on,
The processing of the command is executed (step 203).

If the value of the information access flag 6A is not on, that is, if it is off, an error status is output to the computer 8 and the process is terminated (step 205). FIG. 3 is a block diagram of one embodiment of an information storage system using the information storage device shown in FIG.

The information storage system shown in FIG. 3 comprises the information storage device 1 shown in FIG. 1, a computer 8, and an IDE bus 7 connecting the information storage device 1 and the computer 8. Note that the information storage device 1 is detachable from the computer 8. Computer 8
A nonvolatile memory 22 is built in, and a password 23 for specifying a user is stored in the nonvolatile memory 22. Further, the same password 23 as the password 23 is used as the password of the information storage device 1 itself.
It is recorded in the password storage area 6B of the nonvolatile storage medium 6.

The computer 8 has a first power off flag 20 and a second power off flag 21. By setting the first power-off flag 20 to off, the computer 8 cuts off the power supply from the power supply 24 to the computer 8. In the information storage device 1, the power supply from the power supply 24 to the information storage device 1 is cut off by setting the second power-off flag 21 to off.

Referring to FIG. 4, switching of the information access permission flag 6A between ON and OFF when the computer 8 shifts between the normal mode and the power saving mode will be described. FIG. 4A shows a process of switching the information access permission flag 6A on and off when the computer 8 shifts from the normal mode to the power saving mode. First, the information access flag 6 of the information storage device 1
A is set to off (step 401). Next, the power supply from the power supply 24 to the information storage device 1 is turned off by setting the second power-off flag 21 of the information storage device 1 to off (step 402). By turning off the power of the information storage device 1 in this way, the computer 8 shifts to the power saving mode.

FIG. 4B shows a process of switching the information access permission flag 6A on and off when the computer 8 shifts from the power saving mode to the normal mode. First, the second power-off flag 21 of the information storage device 1 is set to ON, and power is supplied from the power supply 24 to the information storage device 1 (step 403). Next, the information access permission flag 6A of the information storage device 1 is set to ON (step 40).
4). Thus, the computer 8 returns to the normal mode.

Next, with reference to FIG. 5, switching of the information access permission flag 6A between ON and OFF when the computer 8 shifts between the power-on mode and the power-off mode will be described. FIG. 5A shows a process of switching the information access permission flag 6A on and off when the computer 8 shifts from the power-on mode to the power-off mode. First, the set value of the information access permission flag 6A of the information storage device 1 is set to off (step 5).
01). Next, by setting the first power-off flag 20 to off, the power supply from the power supply 24 to the computer 8 is cut off (step 502).

FIG. 5B shows a process of switching the information access permission flag 6A on and off when the computer 8 shifts from the power-off mode to the power-on mode. First, the user turns on the main power supply (step 50).
3). Next, the information access permission flag 6A of the information storage device 1 is set to ON (step 504). In this way, the setting value of the information access permission flag 6A of the information storage device 1 is automatically set to off when the computer 8 is in the power saving mode and when the power is turned off, even if the user is unaware. Of the information stored in the non-volatile storage medium 6 can be maintained.

[0035]

According to the information storage device of the present invention, the following effects can be obtained. The first effect is that even if the information storage device is taken out alone and connected to another computer, reading and writing of information in the information storage device can be disabled.

The information storage medium in the information storage device according to the present invention is provided with an information access permission / inhibition flag and a password storage area, and once the information access permission / inhibition flag is set to off, the password is determined. Unless otherwise, the information access permission flag cannot be reset to ON.
For this reason, the above-described first effect can be obtained. Second
Is that no special hardware is required to obtain the above-described first effect.

The reason is that the information access permission flag and the password are recorded in the nonvolatile storage medium of the information storage device itself. The third effect is that it is difficult to analyze a password. The reason is that, since the password is recorded on the nonvolatile storage medium of the information storage device, when the information access permission flag is turned off, no information can be read from the information storage device.

[Brief description of the drawings]

FIG. 1 is a block diagram of an embodiment of an information storage device according to the present invention.

FIG. 2 is a flowchart showing an operation of the information storage device shown in FIG.

FIG. 3 is a block diagram of an embodiment of an information storage system according to the present invention.

FIG. 4 is a flowchart showing an operation of the information storage system shown in FIG. 3;

FIG. 5 is a flowchart showing another operation of the information storage system shown in FIG. 3;

FIG. 6 is a block diagram of a conventional information storage device.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information storage device 2 Hard disk controller 3 Memory 4 External interface controller 5 Data I / O controller 6 Nonvolatile storage medium 6A Information access permission flag 6B Password storage area 7 IDE bus 8 Computer 9 Internal bus 10 Firmware 20 First power off flag 21st Two power off flag 22 Non-volatile memory 23 Password 24 Power supply 50 Conventional information storage device 51 Computer 52 Cartridge 53 Switch circuit 55 Lock mechanism

Claims (10)

[Claims] 1. An information storage device including at least a nonvolatile storage medium, wherein the nonvolatile storage medium has an information access permission / prohibition flag and a password storage area. An information storage device for setting whether to enable reading of already stored information and writing of new information. 2. A non-volatile storage medium having an information access permission flag and a password storage area, an external interface controller for decomposing an external signal into information and a command, and turning on or off the information access permission flag An information access right setting command that can be set, a firmware having a program for a password setting command that can set a password, and the information and the command are received from the external interface controller, and the command is received according to the program. A hard disk controller for reading information from or writing information to the non-volatile storage medium while interpreting the data; the non-volatile storage medium; the external interface controller; Information storage device comprising a Muwea, an internal bus for connecting the hard disk controller to each other, the. And a controller connected to the non-volatile storage medium, wherein reading of information from the non-volatile storage medium and writing of information to the non-volatile storage medium are performed via the controller. 3. The information storage device according to claim 2, wherein the information is stored. 4. The apparatus according to claim 2, further comprising a memory for temporarily storing information read from the nonvolatile storage medium or information to be written to the nonvolatile storage medium. Information storage device. 5. The information storage device according to claim 1, wherein the information storage device can be detachably attached to a computer. 6. An information storage, comprising: an information storage medium having a first nonvolatile storage medium having an information access permission flag and a password storage area; and a computer connected to the information storage medium. In the system, the computer, a second non-volatile storage medium storing the same password as the password stored in the password storage area, and power on or off to supply power to the computer An information storage system comprising: a first power-off flag to be set; and a second power-off flag to set on / off of a power supply for supplying power to the information storage medium. 7. An information storage medium, comprising: an external interface controller for decomposing an external signal into information and a command; an information access right setting command capable of setting the information access permission flag on or off; Firmware having a program for a password setting command capable of setting a password, receiving the information and the command from the external interface controller, interpreting the command according to the program, and the first nonvolatile storage medium A hard disk controller that reads information from or writes information to the first nonvolatile storage medium; the first nonvolatile storage medium; the external interface controller; the firmware; Information storage system according to claim 6, characterized in that it comprises an internal bus connecting the controller to each other, the. 8. A controller connected to the first nonvolatile storage medium, wherein the controller reads information from the first nonvolatile storage medium and stores information in the first nonvolatile storage medium. 8. The information storage system according to claim 7, wherein writing of the information is performed via the controller. 9. A memory for temporarily storing information read from the first nonvolatile storage medium or information to be written to the first nonvolatile storage medium. 9. The information storage system according to 7 or 8. 10. The information storage system according to claim 6, wherein the information storage device can be detachably attached to the computer.