KR100966236B1 - Computer with authentication type ssd and operating method of it - Google Patents

Abstract

PURPOSE: A computer with an authentication type SSD and an operating method thereof are provided to build an environment including an OS program in an SSD and use the computer anywhere and anytime through the SSD, thereby improving convenience in use. CONSTITUTION: An SSD(Solid State Disk)(200) includes one or more flash memories and a controller. One or more flash memories include a computer operating system program. When user authentication succeeds, the controller activates a memory controller. If the SSD is inserted, an MCU(Micro Control Unit)(370) manages power of a computer with operation control of a power supply unit(310). The MCU loads the OS program from the SSD.

Description

Computer with authentication type SSD and operating method thereof equipped with authentication function {Computer with authentication type SSD and Operating method of it}

The present invention relates to a computer using an SSD equipped with an authentication function and a driving method thereof.

Recently, cases of damage are increasing due to numerous hacking techniques such as fishing or back doors on the Internet, and are exposed to situations where information can be leaked anytime and anywhere due to poor information management of individuals or companies. In addition, a personal computer (PC) may be subject to information invasion due to hacking while physically connected to the Internet, and a storage device built into the PC may be leaked to the outside due to theft. In particular, the leakage of confidential data of the company is a small loss to individuals or companies, and largely a national loss. Therefore, there is a need for a fundamental countermeasure that can fundamentally maintain security of important confidential data, source code, design drawings, etc. stored in a personal PC in an enterprise or a public institution.

Ideally, physically separating data from the network (e.g. the Internet) will maintain the highest level of security, but carrying the PC itself is a difficult task for the user, and the resource is less useful. . In addition, laptops are less efficient due to their relatively low performance. High-performance laptops are vulnerable to high price and mobility.

Therefore, in order to solve such a problem, a method of providing mobility to a storage device, which is the core of security, has been used. Accordingly, some relatively high capacity storage devices have been developed. However, until now, the hard disk (hard disk) most widely used as a storage device was physically vulnerable and relatively large in volume, which had many limitations in mobility. Although such an attempt was made through USB memory, low performance (eg Because of this, the performance was very slow.

On the other hand, SSD (Solid State Disk) has recently been in the spotlight as a next-generation storage device to replace a removable hard disk or USB, SSD is connected to a plurality of flash memory in parallel and each flash memory using a high-performance controller Because it can be accessed at the same time, its performance is superior to other flash memory based storage devices. In the case of hard disks, since they are mechanical devices (for example, platters, heads, motors, etc.), they have a limited volume and appearance, whereas SSDs using nonvolatile flash memory have a free form factor. It also has the advantage of being able to. In addition, SSD does not damage data due to external shock, heat, noise and power consumption is low, and has the advantages of miniaturization and light weight.

The configuration of such a solid state disk (SSD) will be described with reference to FIG. 1.

The conventional SSD is composed of a plurality of flash memory (110-1, ..., 110-n), a memory controller 120, a Peripheral Component Interconnect Express (PCI-Express) interface 130, etc., the memory controller 120 Flash memory 110-1,..., 110-n to control data input through the PCI-Express interface 130 from an external device (eg, a computer). In the case of a request for the stored data, the data is output to the outside (eg, a computer) through the PCI-Express interface 130.

However, the SSD according to the prior art is superior to the conventional removable hard disk or USB memory in terms of mobility, storage capacity, operating speed, etc., but as previously mentioned, the conventional storage medium (for example, removable hard disk) in terms of security , USB memory, etc., the same level of security is still available, for example, if an employee or industrial espionage, such as a company or a public institution, attempts to steal company secrets maliciously, or loses an SSD that contains sensitive data. There was a problem that revealed its limitations.

In order to solve this problem of security, the applicant of the present invention, as shown in Figure 2, the connector unit 230 is connected to a computer including a PCI-Express interface for performing data transmission and reception; At least one flash memory 210-1 to 210-n for storing data transmitted and received with the computer; A memory controller 220 controlling the at least one flash memory; And when detecting a first connection signal with the computer through the connector unit, deactivates the memory controller and uses at least one authentication method (fingerprint verification through the fingerprint recognition unit 360) to the user. After performing the authentication, a solid state disk (SSD) having an authentication function including a control unit 240 for activating the memory controller when the authentication of the user succeeds was pre- filed.

In addition, a computer OS (Operating System) program is stored in at least one flash memory in the first application, and the controller 240 stops booting the computer when detecting a boot signal from the computer through the connector unit. Transmit the request interrupt signal, perform authentication for the user using at least one authentication method (fingerprint verification through the fingerprint recognition unit 260), and if the authentication is successful for the user, the at least one The OS program stored in the flash memory is transferred to the computer.

On the other hand, due to the recent increase in the PC penetration rate, most offices have at least one computer per person, which means that most people who use computers have one computer for their convenience, efficiency, and speed. In order to maintain the usage environment as it is, most of the currently used portable memory devices are not only used for recording data but also slow and physically unstable as described above. Since more than one computer is required for the work to proceed efficiently, the company has the economic burden of having more than one computer per person.

However, in the IT-related developers who travel frequently, the expensive computers (S / W) that need to be installed for each computer and each computer are not used because the computers of the employees who are out of office due to the business trip are not used among the large number of computers in the office every day. ) Utilization is very low.

Therefore, there is a strong demand for measures to reduce the idle computer.

In order to solve the conventional problems as described above, the present invention uses the portable and physically stable SSD as the main storage device and security authentication key, the optimal operating system and application programs set by the user in the SSD owned by each individual Software, and the computer has only physical configuration of input / output ports, monitors, keyboards, mice, etc., so that users can use the computer with their own settings anytime, anywhere. The goal is to drastically reduce the incidence of idle computers while ensuring that they can be used without inconvenience.

In addition, by performing user authentication on the SSD as described above, there is another purpose to ensure that security problems are completely solved by preventing the leakage of information even when the SSD is lost and by not storing the core storage contents in the computer. .

A feature of the present invention for achieving the above object is a security authentication key for a portable PCI-Express type SSD equipped with an expansion board that is associated with a PCI-Express slot inside the computer case and can control various external ports. It is to provide a computer that can be used as a key and also serves as a main storage device so that security can be specialized and idle computers can be drastically reduced.

According to the present invention described above, the user can build the environment including the OS program for the user to use optimally on the SSD, and the computer can be used anytime and anywhere by using the SSD, so that the user carries his computer The effect of carrying is greatly improved because the ease of use is greatly improved.

In addition, it can be used instead of kiosks in various public places, and can be used in place of existing computers or laptops in places where the frequency of use such as various meetings, associations, committees, and local councils is not high.

In addition, it is possible to simplify the installation of computers in public institutions and corporations or public places, to block the source of information leakage through external ports, and to simplify computer design.

In addition, public offices and corporations need to quickly and accurately determine the leakage of internal information or access to intranets when using computers, and manage access rights to information and intranets. Solved perfectly.

In addition, the present invention implements a level of security in accordance with the authority granted by controlling various ports and external internet and storage devices inside the computer by using an expansion board, it is possible to clearly distinguish between the intranet and the Internet network, the internal storage There is an effect of preventing information leakage caused by the device and reducing the license maintenance cost.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

First, an embodiment of a computer using an SSD equipped with an authentication function according to the present invention will be described with reference to FIG. 3.

The computer shown in FIG. 3 is a computer that is installed in a public place and can be used by anyone.

The common computer may include a power supply unit 310 for controlling the power of the computer according to an input operation control signal, a communication unit (NIC (320)) for controlling communication with an external terminal according to the input operation control signal, A computer which is equipped with a BIOS 330 for controlling the operation of the communication unit 320, an input / output port (I / O port) 340 that is responsible for various input / output, and at least one authentication means, or is inserted into itself Card slot 350 for inserting the SSD 200 to perform the authentication function through communication with and activates the input / output port 340 included in the computer according to the input control signal When the input / output port controller 360 to disable the SSD and the SSD are inserted, the operation of the power supply 310 is controlled to manage the power of the computer and to load the OS program from the SSD to control booting and to activate the SSD as a main storage device. Under control Consists of the MCU 370.

In the above-mentioned communication unit 320, a LAN card capable of using the Internet is sufficient due to the nature of a public computer that anyone can use.

In addition, the input / output port controller 360, the MCU 370, and the card slot 350 may be detachably mounted to a computer that is manufactured as a separate expansion board and manufactured separately to be suitable for an existing computer or a public computer of the present invention. It can also be installed.

The operation of such a public computer will be described with reference to FIG. 4 below, in which the structure of the SSD refers to the configuration of the applicant's prior application described with reference to FIG. 2 in the prior art.

First, when the SSD 200 is inserted into the card slot 350, power is supplied to the public computer, and the MCU 370 controls the power supply 310 to supply power to various devices and the SSD 200 constituting the public computer. (S310)

Looking at the power-applying method in detail above, by installing a contact switch in the card slot 350 into which the SSD 200 is inserted, when the SSD 200 is inserted, the MCU 370 is automatically supplied to the public computer. The power supply unit 310 is controlled so that appropriate power is applied to each device constituting the common computer and the SSD 200.

As described above, when the SSD 200 is inserted into the card slot, the SSD 200 performs a user authentication process using an authentication means provided with its own control unit 240 (S320).

In this authentication process, the control unit 240 of the SSD 200 continuously outputs a signal indicating whether the authentication is successful to the MCU 370, and the MCU 370 determines the signal output from the SSD (S330), If the authentication is successful, the public computer is booted using the OS program recorded in the SSD to use the SSD 200 as a main storage device (master), and the communication unit 320 is controlled to normally drive the public computer (S340).

If the authentication fails, the user is notified that the authentication has failed, and the public computer terminates the process.

On the other hand, when the use of the public computer through the step S340 is completed and the SSD 200 is removed from the card slot 350 (S350), the power supplied to each part of the public computer is cut off, the operation of the public computer Ends.

In the SSD 200, the authentication process may be repeated a set number of times when a failure occurs. During the authentication process in the SSD 200, a monitor constituting a public computer is driven to require a user to authenticate the SSD 200. It guides you through the procedure and allows you to make the necessary inputs (for example, fingerprint input to the fingerprint reader or personal identification number authentication via keyboard, authentication via RFID tag, etc.) and indicate whether the authentication failed or succeeded. 370 is performed through communication with the controller 240 of the SSD 200.

Looking at this authentication process in more detail with reference to Figure 5, the control unit 240 provided in the SSD detects the first connection (connection) signal transmitted from the public computer through the connector unit 230 (S510), The power supply to the memory controller 220 is cut off from the connector 230 to deactivate the memory controller 220 (S520).

Here, the power supply to the memory controller 220 is cut off, for example, the control unit 240 transmits a memory controller deactivation signal to the power switching unit 250 and accordingly, the power switching unit 250 to the memory controller 220. This can be done by shutting off the provided power supply. For reference, when implemented as in the present invention, in most cases, the power supplied from the connector unit 230 to the memory controller 220 is cut off from the beginning before the SSD is connected to the computer. The procedure may be omitted.

Thereafter, the controller 240 configuring the SSD performs authentication on the user by using at least one authentication method (S530). For example, the controller 240 may authenticate the user by confirming a result of comparing the fingerprint information input through the fingerprint sensor with pre-stored fingerprint information in association with the fingerprint reader 250. Authentication may be performed by receiving a personal identification number for the set user authentication from a keyboard.

If the authentication is successful, the controller 240 supplies power supplied from the connector 230 to the memory controller 220 to activate the memory controller 220 (S550). In this case, the power supplied to the memory controller 220 is controlled by the controller 240 to transmit the memory controller activation signal to the power switch 250 and accordingly the power switch 250 is provided to the memory controller 220. This can be done by supplying power.

As such, since the memory controller 220 is activated, the MCU 370 of the public computer boots the computer using the OS program recorded in the SSD 200, and at least one flash memory 210-built in the SSD 200. 1, ..., 210-n) will be used as the main storage device.

Thereafter, when the use of the SSD 200 is completed and the SSD 200 is removed from the card slot 350, the control unit 240 of the SSD 200 is connected to the connector unit through the power switching unit 250. In operation 230, the power provided to the memory controller 220 is cut off to inactivate the memory controller 220 again.

On the other hand, in the above step S540, if the authentication for the user performed using at least one authentication method fails, the control unit 240 of the SSD 200 proceeds to step S560, the number of times of authentication failure for the user is It is determined whether the set threshold is exceeded.

If the number of authentication failures does not exceed the threshold, repeating step S530, the controller 240 again authenticates the user using at least one authentication method.

However, if the number of authentication failures exceeds the threshold (i.e., a user without proper authority fails authentication several times), the process proceeds to step S570, where the controller 240 deletes data from the memory controller 220. The memory controller 220 deletes all data stored in at least one flash memory 210-1,..., 210-n. Accordingly, the present invention may prevent leakage of confidential information by spontaneously deleting data stored in a flash memory even if theft or loss occurs.

In addition, an embodiment of a computer (hereinafter referred to as a security computer) that is used by a company or the like and requires security as another embodiment of the present invention will be described with reference to FIG. 6.

A communication unit 510 consisting of a LAN card 504 connected to an intranet and a LAN card 508 connected to the Internet, an input / output port 522 and 524, an internal storage device 530, and the communication unit 510. And a BIOS 540 for controlling the internal storage device 530, and having at least one or more authentication means to insert the SSD 200 which performs an authentication function by itself or through communication with an inserted computer. When the card slot 550 and the input / output port controller 560 and the SSD 200 for activating / deactivating the input / output ports 522 and 524 included in the computer according to the input control signal are inserted, Receiving authentication information from the SSD to verify whether the authentication is successful, if the authentication is successful (S680) to verify the authorization information, the communication unit 510, the internal storage device 530, input / output to match the authorization information By controlling the operations of the ports 522 and 524 and the SSD 200, the computer is driven according to the authority information. It consists of an MCU (570).

In the above, the input / output port controller 560 selectively enables / disables various types of input / output ports 522 and 524 in some cases by utilizing the authority information set in the MCU 570. / Disable).

In addition, the selection of the intranet and the Internet may be selectively used by one BIOS card 540 under the control of the MCU 570, or both LAN cards may be turned on / off at a time.

In addition, according to the authority, the BIOS 540 may set the internal storage device 530 as a main storage device (Master) or a secondary storage device (Slave).

The authority information is a self-identification code given by a management system managing a security computer. The identification code is confirmed by the MCU to determine whether the Internet and an intranet are used, control of input / output ports, and use of internal storage devices. Check it.

Meanwhile, the security computer has a main board 580 provided with a communication unit 510, an input / output port 522, a bios 540, an internal storage device 530, and a power supply unit 592 in a case. In addition, the expansion board 590 provided with the input / output port controller 560, the card slot 550, and the MCU 570 may be detachably installed on the main board 580.

Since the security computer of the present invention does not install license-sensitive software in the internal storage device and the corresponding software is installed only in the SSD 200, the security computer can be given a license per SSD instead of a per-computer license, which is a waste of maintaining the license. Can reduce the cost.

Looking at the operation of the security computer configured as described above in more detail with reference to Figure 7, when the SSD 200 is inserted into the card slot (550) (S610), MCU (570) whether the computer is currently booting or operating state Check (S620), the computer is not in the boot or operating state, that is, if the power is not applied to the power control unit 592 of the computer to supply power to the computer (S630), the power is applied to boot the computer Or, if the operation state, the booting or any process associated with the operation is stopped (S640).

Subsequently, the control unit 240 provided in the SSD 200 performs the security authentication step (S650), and the MCU 570 determines whether the authentication is successful (S660). When the use of the security computer is used and the authentication is successful, the MCU 570 of the computer checks the authority information of the SSD 200 (S680), so that the communication unit 510, the internal storage device 530, and fit the authority information. The operation of the input / output ports 522 and 524 and the SSD 200 is controlled so that the computer is driven according to the authority information.

In more detail, when the user who has simultaneous access to the Internet and the intranet inserts his SSD 200 into the card slot 550, the MCU 570 controls the BIOS 540 to provide two LAN cards 504. 508 is turned on at the same time and the internal storage device 530 is set as a secondary storage device (Slave). The input / output port controller 560 also enables the control port to activate the internal / external input / output ports 522 and 524 such as serial, USB, and the like.

When the SSD 200 is inserted into the card slot 550 and power is supplied to the computer, since the SSD 200 operates as a master storage device, the SSD 200 is booted using an OS program installed in the SSD 200. . In addition, the internal storage device 530 may be accessed through an auxiliary storage path (for example, D: \).

If the SSD 200 without the intranet access authority is detected in the card slot 550 or if the SSD 200 is not inserted, the internal storage device 530 operates as a main storage device, and the secure computer includes an internal storage device ( Boot using the OS program recorded at 530 and all ports are activated. In addition, only the LAN card 508 connected to the Internet is activated and configured as a computer state capable of connecting to the general Internet.

Similarly, the user who can only access the intranet cannot use the internal storage device 530 and the external input / output port 524, and only the LAN card 504 connected to the intranet is activated to configure the computer for intranet access. do.

After the SSD 200 is removed, the running program of the secure computer is terminated, and it is determined whether to continue to use the computer by checking whether to reboot the OS program recorded in the auxiliary storage device.

At this time, since the authentication process in the SSD is the same as the authentication process shown in FIG. 5, detailed description thereof will be omitted.

1 is a view showing a conventional SSD

2 is a view showing an SSD having a conventional authentication function

3 illustrates a computer according to an embodiment of the present invention.

4 is a diagram illustrating a method of driving the computer of FIG. 3.

5 is a diagram illustrating an authentication process of an SSD having an authentication function.

6 illustrates a computer according to another embodiment of the present invention.

7 is a diagram illustrating a method of driving the computer of FIG. 6.

Claims (20)

Connector unit 230 including a PCI-Express interface for performing data transmission and reception, at least one flash memory (210-1 ~ 210-n) for storing various data including a computer operating system (OS) program When the first connection signal with the computer is detected through the memory controller 220 and the connector to control the at least one flash memory, the memory controller is inactive and at least one authentication method is performed. After the authentication of the user using the fingerprint verification through the unit 360), if the authentication is successful for the user having an authentication function including a control unit 240 for activating the memory controller (active) Solid state disk (SSD) (200), A power supply unit 310 for controlling the power of the computer according to the input operation control signal; Communication unit for controlling the communication with the external terminal according to the input operation control signal (NIC (Network interface card), 320), BIOS 330 for controlling the operation of the communication unit 320, input / output port (I / O port) 340 responsible for various input and output, A card slot (350) provided with the computer operating system (Operating System) program and allowing the SSD 200 to perform an authentication function to be inserted therein; An input / output port controller 360 for activating / deactivating the input / output port 340 included in the computer according to an input control signal, When the SSD is inserted, it controls the operation of the power supply unit 310 to manage the power of the computer and load the OS program from the SSD to control the boot and the MCU is configured to control the SSD to be activated as the main storage device Computer which uses SSD equipped with certification function to assume. According to claim 1, wherein the input / output port controller 360 and MCU 370 and the card slot 350 is made of a separate expansion board is manufactured separately to suit the existing computer or a common computer of the present invention A computer using an SSD with authentication function, characterized in that the computer is detachably installed. Connector unit 230 including a PCI-Express interface for performing data transmission and reception, at least one flash memory (210-1 ~ 210-n) for storing various data including a computer operating system (OS) program When the first connection signal with the computer is detected through the memory controller 220 and the connector to control the at least one flash memory, the memory controller is inactive and at least one authentication method is performed. After the authentication of the user using the fingerprint verification through the unit 360), if the authentication is successful for the user having an authentication function including a control unit 240 for activating the memory controller (active) Solid state disk (SSD) (200), A communication unit 510 including a LAN card 504 connected to an intranet and a LAN card 508 connected to the Internet, Input / output ports 522, 524, Internal storage (530), BIOS 540 for controlling the communication unit 510 and the internal storage device 530, A card slot 550 provided with the computer operating system (Operating System) program and allowing the SSD 200 to perform an authentication function to be inserted therein; An input / output port controller 560 that activates / deactivates input / output ports 522 and 524 included in the computer according to an input control signal, When the SSD 200 having the authentication function is inserted into the card slot 550 (S610), the computer is checked whether it is currently booted or operated (S620), and the computer is not booted or operated, that is, power is applied. If not, control the power unit 592 of the computer to supply power to the computer (S630), if the power is applied to the computer booting or operating state, stop any process related to booting or operation, authentication from the SSD When the authentication is successful by receiving the information and verifying the authentication, if the authentication succeeds (S680), the communication unit 510, the internal storage device 530, and the input / output port 522 to match the authority information. 524, the computer using the SSD with the authentication function, characterized in that consisting of an MCU (570) to control the operation of the SSD 200 so that the computer is driven according to the authority information. 4. The MCU 570 of claim 3, wherein the MCU 570 is a self-identification code given by a management system for managing a computer, and uses the input / output port controller 560, the communication unit 510, and the internal device by using the authority information preset in the SSD. A computer using an SSD equipped with an authentication function, which determines whether the storage device 530 and the SSD 200 are used and the use purpose (whether used as a primary storage device or an auxiliary storage device). The main board 580 of claim 3, wherein the computer includes a communication unit 510, an input / output port 522, a bios 540, an internal storage device 530, and a power supply unit 592. Is installed, the input / output port controller 560, the card slot 550, the expansion board 590 equipped with the MCU 570, the authentication function, characterized in that detachably installed on the main board 580 Computers with SSDs equipped with this. The apparatus of claim 1 or 3, wherein the SSD 200 comprises: a connector unit 230 connected to a computer and including a PCI-Express interface for performing data transmission and reception; At least one flash memory 210-1 to 210-n for storing data transmitted and received with the computer; A memory controller 220 controlling the at least one flash memory; And upon detecting an initial connection signal with the computer through the connector unit, deactivates the memory controller, authenticates the user using at least one authentication method, and then authenticates the user successfully. And a controller 240 activating the memory controller when the memory controller is activated. The method of claim 6, wherein the authentication method is compared with a fingerprint recorded in the SSD recorded through the fingerprint input unit in the fingerprint recognition unit provided in the SSD, or communicated with a computer to perform a Personal Identification Number authentication or an RFID tag authentication. Computer using an SSD with authentication function, characterized in that one or more selected. SSD 200 having at least one flash memory 210-1 to 210-n for storing various data including a computer operating system (OS) program and at least one authentication means to perform an authentication function Is inserted into the card slot 350, the power is supplied to the computer; Performing a user authentication process using an authentication means in the SSD 200 inserted into the card slot 350; If the authentication is successful in the SSD MCU (370) constituting the computer booting the computer using the OS program recorded in the SSD, characterized in that it comprises the step of using the SSD 200 as a master storage device (master) How to run a computer using SSD with authentication function. The computer of claim 8, wherein when the SSD 200 is removed from the card slot 350 (S350), the power supplied to each part of the public computer is cut off. Method of driving. SSD 200 having at least one flash memory 210-1 to 210-n for storing various data including a computer operating system (OS) program and at least one authentication means to perform an authentication function ) Is inserted into the card slot 550 (S610), the MCU 570 checks whether the computer is currently booted or operated (S620), and the computer is not booted or operated, that is, the power is applied. Or by controlling the power supply unit 592 of the computer to supply power to the computer (S630), when the power is applied to the computer booting or operating state, stopping any process related to booting or operation; Performing a user authentication process using an authentication means in the SSD 200 inserted into the card slot 550; If the authentication is successful, the MCU 570 of the computer checks the authority information of the SSD 200 (S680), so that the communication unit 510, the internal storage device 530, the input / output port 522 to match the authority information ( 524) controlling the operation of the SSD 200 to drive the computer according to the authority information. The method of claim 10, In the case of the user's SSD 200 that can simultaneously access the Internet and the intranet in the process of determining the authority information, the MCU 570 simultaneously turns on the plurality of LAN cards 504 and 508 to use the Internet and the intranet mode. Set the internal storage device 530 as a secondary storage device, activate all internal / external input / output ports 522 and 524, and at least one flash memory 210 provided in the SSD 200. -1, ..., 210-n) using the SSD with the authentication function, characterized in that booting using the OS program of the SSD 200 using the main storage device. The method of claim 10, wherein the MCU 570 operates the internal storage device 530 as a main storage device to the internal storage device 530 when the SSD 200 of the user who does not have an intranet access right in the right information determination process. Boots using the recorded OS program, activates all ports, and uses only the LAN card 508 that is connected to the Internet. How to run a computer. 11. The method of claim 10, in the case of the user SSD 200 that can only access the intranet in the authority information determination process, the MCU 570 of the computer can use the internal storage device 530 and the external input / output port 524. It activates only the LAN card 504 connected to the intranet, so that it is configured as an intranet intranet connection computer, and at least one flash memory 210-1, ..., 210-n provided in the SSD 200 Method of driving a computer using the SSD with the authentication function, characterized in that booting using the OS program of the SSD 200 as a main storage device. The method of claim 10, wherein when the SSD 200 is removed, the program running on the secure computer is terminated, and whether to reboot the OS program recorded in the auxiliary storage device is determined so as to determine whether to continue using the computer. A method of driving a computer using an SSD equipped with an authentication function. 11. The method of claim 10, during the authentication process in the SSD 200, the monitor constituting the computer is driven to guide the user necessary procedures for the SSD 200 authentication and to perform the necessary input, authentication failure or success Method of driving a computer using an SSD equipped with an authentication function, characterized in that indicating whether or not. The method of claim 8 or 10, When the SSD detects the first connection signal with the computer before performing the authentication process, the SSD deactivates the memory controller and, if the authentication is successful, activates the memory controller equipped with the SSD having an authentication function. . The method of claim 8 or 10, The authentication process is a method of driving a computer using an SSD with an authentication function, characterized in that the repeated repeatedly up to a threshold set the number of failures when the authentication failure. The method of claim 17, If the number of failures exceeds the threshold, using the SSD with the authentication function characterized in that it further comprises the step of controlling the memory controller of the SSD to delete the data stored in the at least one flash memory constituting the SSD How to run a computer. The method of claim 8 or 10, When detecting the disconnection signal from the computer, the control unit constituting the SSD further comprises the step of deactivating the memory controller for controlling the at least one flash memory of the computer using the SSD equipped with the authentication function. Driving method. The method of claim 19, The deactivation of the memory controller is performed by cutting off the power provided from the connector unit to the memory controller.

Images