JPS62287329A - File controller - Google Patents

Abstract

PURPOSE:To prevent a person who does not know a cipher from updating a data, or from reading the data, by searching a key part by using an enciphered retrieval data. CONSTITUTION:Write of the first record 54-the n-th record 56 is performed by a WRITE CKD command, respectively, and read or updating of a data part of the record is performed by a READ D or write D command which is issued subsequently to a SEARCH K command for executing a retrieval of a key part, respectively. A data transfer controlling circuit 203 executes a comparison of a decoded retrieval data sent from a decoding circuit 202 through a signal line 223, and a key part which is read from a selected storage device, and sent through a subordinate device interface circuit 204 and a signal line 224. When the contents of the decoded retrieval data and the key part coincide, an execution of the WRITE D or READ D command which is chained by the SEARCH K command is permitted, the contents of the data part is updated or read.

Description

[Detailed Description of the Invention] & Detailed Description of the Invention [Field of Industrial Application] The present invention relates to a control device that controls a magnetic disk device, an optical disk device, etc., and particularly a file control device that takes data security measures. Regarding.

[Conventional technology]

In recent years, with the spread of computer systems, problems regarding data security have frequently arisen.

In order to prevent valuable data from being intentionally destroyed or confidential data from being read, conventional methods have been used to verify the legitimacy of access to data using software.

[Problem that the invention seeks to solve]

The above-mentioned conventional software-based data security guarantee methods require the software to perform complex processing, which has the disadvantage of degrading system performance, and the data cannot be accessed using other software. There was a drawback that it could be stored away.

[Means for solving problems]

The file control device of the present invention includes: a host device interface circuit that controls connection with a host device; a decryption circuit that decrypts encrypted data transferred from the host device;
a data transfer control circuit that controls data transfer between a host device and a storage device; a lower device interface circuit that controls connections with a plurality of storage devices; and the host device ink 7.
It has a microprogram control circuit that controls a processing circuit, a decoding circuit, a data transfer control circuit, and a lower-level device interface circuit.

〔Example〕

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a circuit diagram showing in block form one embodiment of the present invention.

The file control device 20 in one embodiment of the present invention includes a host device interface circuit 201, a decoding circuit 202,
It is composed of a data transfer control circuit 203, a lower device interface circuit 204, and a microprogram control circuit 205, and can connect and control a plurality of storage devices 31, 32, and 33.

Furthermore, in one embodiment of the present invention, the storage devices 31 and 32
and 33, there are a plurality of tracks for recording data, and on each track there is a home address 52 and a plurality of records 53-56 as shown in FIG. Home address 52 and 0th record 53 are used to display the address and status of the track,
The 1st record 54 to the nth record 56 are records for recording data, and each includes a count section for displaying the address and status of the record, a key section for storing search data, and a record section for recording data to be stored. It is assumed that the data section consists of the following data section.

Referring to FIG. 2, the code 54 to record 5
Writing in 6 is performed by the ITE CKD command, and reading or updating the data section of a record is performed by the READD or WRITE D command issued following the 5EARCHK command that searches a part of the record. shall be implemented.

In FIGS. 1 and 2, when a WRITE CKD command for writing the n-th record 56 is issued from the host device 10, the microprogram control circuit 205 connects the signal line 211, the host device interface circuit 201, and the signal line 225. Receive this through the signal lines 225, 227
and 228 to the upper device ink 7 process circuit 201, data transfer control circuit 203, and lower device interface circuit 204, respectively. 7 Do.

Instruct execution. ■ITE CKD command knowledge The contents of the count section, key section, and data section that are subsequently transferred from the host device 10 are the signal line 211, the host device interface circuit 201, the signal, W221, and the data transfer control circuit 203.
, signal line 224, and lower device interface circuit 204 onto the selected track in the selected storage device.

When the 5llil:ARCHK command is issued from the higher-level device 1o, the microprogram control circuit 205 connects the higher-level device interface circuit 201, decoding circuit 202, data transfer control circuit 203, and lower-level device interface through signal lines 225, 226, 227, and 228. circuit 20
4 to execute the 5EARCHK command. 5EA
The encrypted search data transferred from the host device 10 following the RCHK command is sent to the signal line 211, the host device interface circuit 201, and the signal lV+! ,! 222
is sent to the decoding circuit 202 through the decoding circuit 202.
It is compounded at r3.

The data transfer side diameter 1 circuit 203 is a signal, f]! The decoded search data sent from the decoding circuit 202 through 223 is compared with the key part read from the selected storage device and sent through the lower device-interface circuit 204 and signal line 224.

If the decrypted search data matches some of the contents, it is chained to the 5EARCHK command nfr-WRIT
E D or READ D Command execution allowed n1
The contents of the data section are updated or read. If the comparison result does not match, WRITE D or READ
Execution of the D command is prohibited, and unnecessary destruction of the zone or reading of confidential data is prohibited.

〔Effect of the invention〕

As explained above, the present invention prevents a person who does not know the encryption from updating the data or reading the data by performing a partial search using encrypted search data. Can be done.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing a file control device of the present invention;
FIG. 2 is a diagram showing a data recording format in a storage device connected to the file control device of the present invention.

Claims (1)

[Claims] A host device interface circuit that controls the connection with the host device, a decryption circuit that decrypts encrypted data transferred from the host device, and data that controls data transfer between the host device and the storage device. A data transfer control circuit that controls transfer, a lower device interface circuit that controls connections with a plurality of storage devices, and a lower device interface circuit that controls the upper device interface circuit, the decoding circuit, the data transfer control circuit, and the lower device interface circuit. A file control device characterized by comprising a microprogram control circuit that performs the following steps.