KR101620685B1 - Method and apparatus for managing time-out data stored - Google Patents

Abstract

There is provided a time-out data management apparatus including a storage unit for storing time-out data, a control unit for controlling the storage unit, and a data management unit for managing the time-out data stored in the storage unit. Since the time-out data stored in the storage unit is accessed only through the data management unit and is accessible only for a predetermined valid period of the time-out data, the time-out data for which a predetermined validity period has elapsed is automatically deleted And the security for the time-out data can be maintained.

Description

METHOD AND APPARATUS FOR MANAGING TIME-OUT DATA STORED BACKGROUND OF THE INVENTION [0001]

The following description relates to an apparatus and method for managing time-out data in which a valid period exists, and more particularly to an apparatus and method for managing time-out data accessed only through a data management unit.

Recently, storage devices characterized by the non-volatility of stored data from personal mobile terminals to large-capacity server systems have been widely used. Such storage devices may store data requiring confidentiality, such as sensitive personal information, industrial and military confidential information. In order to manage the data that needs to be kept secret in the storage device, a method of allowing data to be provided only for valid access by encrypting access to the system that manages the storage device is used. However, in the case of such a conventional method, data leakage may occur by hacking the system or detaching the storage device.

 Encrypting data that requires stored confidentiality can keep the data secure even if the storage device is detached or the system is hacked. However, if the amount of data is large, it can be costly and time-consuming to encrypt and manage the data. There is a disadvantage that it takes time.

 Accordingly, there is a need for an efficient data management apparatus and method that can maintain the security of data requiring confidentiality stored in a storage device even if the system is hacked or a storage device is disconnected.

Korean Patent Laid-Open No. 10-2005-0082258 (published on Aug. 23, 2005) discloses a method and apparatus for protecting data in a data storage system, and a method for securely erasing data while preventing leakage of information stored in a recording medium. A data security erasure method of a recording medium and a disk drive using the same are disclosed.

One embodiment can provide a time-out data management apparatus and method in which time-out data in which a predetermined validity period stored in the storage unit is accessed only through the data management unit and accessible only for a predetermined validity period.

In one embodiment, the security of the time-out data stored in the storage device is maintained even when the storage device is detached from the system by including the data management unit managing the deletion of expired time-out data in the storage device The present invention can provide a device and a method that can be used.

In one aspect of the present invention, the information processing apparatus includes a storage unit for storing time-out data, a control unit for controlling the storage unit, and a data management unit for managing the time-out data stored in the storage unit, Data is accessed only through the data management unit and is accessible only for a predetermined validity period of the time-out data.

The data management unit may encrypt information related to the predetermined validity period of the time-out data.

The data management unit may delete the time-out data stored in the storage unit when the predetermined validity period has elapsed, and may transmit a signal indicating deletion of the time-out data to the control unit.

The control unit may operate as a host for the storage unit.

The access to the time-out data stored in the storage unit may be accepted subject to authentication by the data management unit

The data management unit may be disposed in the control unit and may delete the time-out data stored in the storage unit when the predetermined validity period has elapsed.

When the predetermined validity period elapses, the data management unit may transmit a secure erase command for the time-out data to the storage unit.

By the secure erase command, the time-out data can be logically and physically deleted from the storage.

The physical deletion of the time-out data may be an initialization of the bits into which the time-out data is written.

The data management unit may be disposed in the storage unit and may delete the time-out data stored in the storage unit when the predetermined validity period has elapsed.

The data management unit may physically delete the time-out data by deleting the time-out data in the storage unit on a page, block, or sector basis when the predetermined validity period has elapsed.

The electronic device may further include an interface unit for connecting the control unit and the storage unit.

The interface unit may identify the data management unit included in the storage unit.

The interface unit may connect the control unit and the storage unit by recognizing the identifier of the data management unit.

The storage may be detachable from the electronic device.

In another aspect, there is provided a nonvolatile memory including: a nonvolatile memory for storing time-out data; a controller for controlling the nonvolatile memory; and a controller for managing the time-out data stored in the non- Wherein the time-out data is accessed only from the host identifying the data manager through the data manager, and is accessible only for a predetermined validity period of the time-out data.

In another aspect, there is provided a method comprising: identifying whether a predetermined validity period of the time-out data has elapsed, performed by an electronic device managing time-out data stored in a non-volatile memory; Out data stored in the non-volatile memory when the predetermined validity period has elapsed, and transmitting a signal indicating deletion of the time-out data to a host of the non-volatile memory, A method for managing time-out data, wherein time-out data is accessed only from the host through the data management unit and accessible only for a predetermined validity period of the time-out data.

The time-out data in the storage unit in which the predetermined validity period has elapsed can be automatically deleted without the intervention of the administrator because the time-out data in which the predetermined validity period exists is accessed only through the data management unit and is accessible only for a predetermined validity period An apparatus and method is provided in which time-out data can be maintained and security for time-out data can be maintained.

The data management unit managing the deletion of expired time-out data can be connected to the host only by the interface unit included in the storage device and capable of identifying the data management unit, so that the storage device is detached from the host or the host is hacked There is provided an apparatus and method capable of maintaining the security of time-out data stored in a storage device.

1 shows an electronic device including a data management unit according to an embodiment.
2 shows a method of encrypting information related to the validity period of time-out data and time-out data according to an example.
3 illustrates an electronic device including a data management unit according to an embodiment.
FIG. 4 illustrates a method for an interface unit to identify a data management unit according to an example.
FIG. 5 shows a storage device including a data management unit according to an embodiment and a host of the storage device.
6 is a flowchart illustrating a method of managing time-out data according to an embodiment.

In the following, embodiments will be described in detail with reference to the accompanying drawings. Like reference symbols in the drawings denote like elements.

1 shows an electronic device including a data management unit according to an embodiment.

The electronic device 100 of FIG. 1 includes a storage unit 120 for storing data, a control unit 110 for controlling the storage unit 120, and a storage unit 120 for managing time-out data 150 stored in the storage unit 120 And a data management unit 130.

The control unit 110 can manage components of the electronic device 100 including the storage unit 120 and can execute programs or applications used by the electronic device 100. [ The control unit 110 may be at least one processor of the electronic device 100 or at least one core in the processor, for example, as an apparatus for processing operations required for executing programs and processing data.

The control unit 110 may operate as a host of the storage unit 120 that transmits an access request or an access command to the data stored in the storage unit 120. [ For example, the control unit 110 may transmit a data write command to the storage unit 120 or may transmit a read command or an erase command to the storage unit 120 for data stored in the storage unit 120. [

For example, the electronic device 100 may be a system or computer system that includes a storage unit 120 as a storage device and a control unit 110 as a host of the storage device.

The storage unit 120 may be a device for storing general data 140 and / or time-out data 150. For example, the storage unit 120 may be a nonvolatile memory-based storage device.

The storage unit 120 may include a controller 125 that controls the non-volatile memory 128 and the non-volatile memory 128. [ The data stored in the nonvolatile memory may not be erased even when the power supply to the nonvolatile memory is interrupted. For example, the non-volatile memory may include a hard disk drive, a solid state drive (SSD), and a flash memory.

Data may be stored in the non-volatile memory 128. [ The storage of the data may be a write of data to the non-volatile memory 128.

The data stored in non-volatile memory 128 may include general data 140 and time-out data 150. The time-out data 150 may be data having a predetermined validity period. The general data 140 may be any other data than the time-out data 150. The time-out data 150 may be data that is accessible only for a predetermined validity period of the time-out data 150. For example, when a predetermined validity period has elapsed, access to the time-out data 150 may not be possible, or the time-out data 150 after a predetermined validity period has elapsed may be automatically stored in the nonvolatile memory 128 Lt; / RTI >

The time-out data 150 may include information requiring security or information requiring confidentiality. Alternatively, the time-out data 150 may include information valid only for a predetermined validity period. The predetermined validity period of the time-out data 150 is a period determined by the creator or provider of the time-out data 150. [

The controller 125 of the storage unit 120 may be a memory controller of the nonvolatile memory 128. [ The control unit 125 may manage access to the data 140 and 150 written to the non-volatile memory 128. [ For example, the control unit 125 may store the data 140 and 150 in the non-volatile memory 128 or may delete the data 140 and 150 stored in the non-volatile memory 128. [ When the non-volatile memory 128 is a flash memory, the control unit 125 controls each of the logical pages of the non-volatile memory 128 to each of the physical pages of the non-volatile memory 128, And a translation layer (FTL) unit (not shown).

The data management unit 130 may manage the time-out data 150 stored in the storage unit 120 or the nonvolatile memory 128. [ The data management unit 130 may be a hardware module or a software module for managing the time-out data 150.

The data management unit 130 may control access to the time-out data 150 and may control the reading, erasing or deletion of the time-out data 150, Can be managed and encrypted.

The data managing unit 130 may be disposed inside the control unit 110. However, the data managing unit 130 may be disposed outside the control unit 110, as shown in FIG. Alternatively, the data management unit 130 may be disposed in the storage unit 120 or the control unit 125, unlike the one shown in FIG. The case where the data management unit 130 is disposed in the storage unit 120 or the control unit 125 will be described in more detail with reference to FIGS. 3 to 5, which will be described later.

The time-out data 150 stored in the storage unit 120 or the non-volatile memory 128 can be accessed only through the data management unit 130. [ For example, the data management unit 130 may transmit an access command for accessing the time-out data 150 to the control unit 125, and the control unit 125 may transmit the time-out data 150 to the time- It is accessible.

That is to say, no user or manager of the electronic device 100 and a user or creator of the time-out data 150 can access the time-out data 150 by bypassing it without passing through the data management part 130 It may be absent. That is, no one may be able to access the time-out data 150 directly.

A user who wishes to access the time-out data 150 may access the time-out data 150 via the user interface provided by the data management unit 130, or may transmit the identifier provided by the data management unit 130 Or log-in to the account provided by the data management unit 130, or perform authentication by the data management unit 130. [0064] For example, access to the time-out data 150 stored in the storage unit 120 or the non-volatile memory 128 may be accepted subject to authentication by the data management unit 130. [ The identifier of the data management unit 130, the key of the data management unit 130, and the public key of the data management unit 130, among the public key of the data management unit 130, And may include at least one.

Alternatively, the access command for the time-out data 150 may be transmitted to the storage unit 120 through the data management unit 130 or the control unit 110 only when the data management unit 130 is authenticated.

Otherwise, when the data management unit 130 is included in the control unit 125 or the storage unit 120, only when the control unit 110 is authenticated by the data management unit 130, the data management unit 130 An access to the time-out data 150 can be made.

The data management unit 130 may delete the time-out data 150 stored in the storage unit 120 or the nonvolatile memory 128 when a predetermined valid period of the time-out data 150 has elapsed. For example, when the predetermined valid period of the time-out data 150 has elapsed, the data management unit 130 stores the time-out data 150 stored in the storage unit 120 or the nonvolatile memory 128 to the electronic device 100, Can be automatically deleted without the administrator or user's intervention. The deletion of the time-out data 150 by the data management unit 130 may be the transmission of the deletion request of the time-out data 150 to the control unit 125 of the data management unit 130. [

The data management unit 130 may receive a signal indicating the deletion of the time-out data 150 from the control unit 125 when the time-out data 150 is deleted, Lt; RTI ID = 0.0 > 150 < / RTI > The signal indicating the deletion of the time-out data 150 may be a signal indicating that the time-out data 150 has been deleted (completion of deletion of the time-out data 150).

When the data management unit 130 is included in the control unit 110, the data management unit 130 outputs a signal indicating deletion of the time-out data 150 to the output unit (not shown) of the control unit 110 or the output unit (Not shown). A signal indicating the deletion of the received time-out data 150 may be output via the output so that deletion of the time-out data 150 may be recognized by the user or administrator of the electronic device 100. [

The data management unit 130 transmits a secure erase command for the time-out data 150 to the control unit 125 of the storage unit 120 after a predetermined valid period of the time-out data 150 has elapsed . The secure erase command may be an instruction to logically and physically erase the time-out data 150. [ That is to say, the time-out data 150 may be logically and physically deleted from the storage unit 120 or the non-volatile memory 128 by a secure erase command. The logical deletion of the time-out data 150 may be the deletion of a pointer to the area in which the time-out data 150 was written. The physical deletion of the time-out data 150 may be the initialization of the bits into which the time-out data 150 is written.

The host or control unit 110 may be encrypted to prevent the data management unit 130 from changing or manipulating when the data management unit 130 is disposed in the host 110 of the storage unit 120, have. For example, the host or control unit 110 may be encrypted at the file system of the electronic device 100 or at the operating system layer of the host.

Out data is logically and physically deleted by the data management unit 130 and access to the time-out data 150 is permitted only through the data management unit 130, thereby preventing the time-out data 150 ) Can be maintained.

2 shows a method of encrypting information related to the validity period of time-out data and time-out data according to an example.

The time-out data 150 shown may correspond to the time-out data stored in the storage unit 120 or the non-volatile memory 128 described above with reference to FIG. The time-out data 150 may include information 210 related to the validity period. The expiration date of the shown time-out data 150 may be April 6, 2015. Once the validity period has elapsed, access to the time-out data 150 may be disabled.

The data management unit 130 may encrypt the time-out data 150 to prevent falsification or tampering of the time-out data 150. The data management unit 130 may encrypt the information 210 related to the validity period. For example, the information 210 related to the validity period may be used to falsify, alter or alter the information 210 relating to the validity period, such as the user or administrator of the electronic device 100 and the user or constructor of the time- Can not be encrypted. The data management unit 130 may encrypt the information 210 related to the validity period using any algorithm that can be generally used for encrypting the data.

The encryption of the information related to the validity period of the time-out data can be performed each time new time-out data is stored in the storage unit 120 or the nonvolatile memory 128. [

The information 210 related to the validity period is encrypted so that the reliability of the validity period of the time-out data 150 can be assured.

The technical contents described above with reference to FIG. 1 can be applied as it is, so a detailed description will be omitted below.

3 illustrates an electronic device including a data management unit according to an embodiment.

In FIG. 3, the case where the data management unit 130 described above with reference to FIG. 1 is arranged in the storage unit 120 is shown. As described above, the data management unit 130 may be disposed in the storage unit 120 and may store the time-out data 150 in the storage unit 120 or the nonvolatile memory 128 when the predetermined validity period of the time- Time-out data 150 can be deleted. For example, the data management unit 130 may be disposed in the control unit 125 of the storage unit 120, as shown in FIG. In other words, the data management unit 130 may be part of the memory controller of the nonvolatile memory 128 including, for example, flash memory or SSD.

The data management unit 130 deletes the time-out data 150 in the storage unit 120 or the nonvolatile memory 128 in units of pages, blocks, or sectors when a predetermined valid period of the time-out data 150 has elapsed So that the time-out data 150 can be physically deleted. For example, the data management unit 130 may delete the time-out data 150 on a page, block, or sector basis by accessing the time-out data 150. [

The storage unit 120 may be removable from the electronic device 100. For example, data stored in the storage unit 120 may not be able to be copied or retrieved, but the storage unit 120 itself may be moved separately as a separate apparatus. The separate storage 120 may be mounted on other compatible electronic devices. That is to say, the separate storage unit 120 can be traded separately from the electronic device 100.

The electronic device 100 may further include an interface unit 310 for connecting the control unit 110 and the storage unit 120. The interface unit 310 may be included in the control unit 110 that operates as a host as shown or may be disposed outside the control unit 110. The interface unit 310 may be a device that enables a physical connection or a software connection between the storage unit 120 and the control unit 110. For example, the interface unit 310 may be a hardware module such as an interface card, an interface chip and an interface port, and may be a software module such as a device driver or a program.

Alternatively, the interface unit 310 may be an interface port of a predetermined standard. The interface unit 310 may be a chip for transmitting data between the storage unit 120 and the control unit 110.

The interface unit 310 may identify the storage unit 120 or the data management unit 130 including the data management unit 130. For example, the interface unit 310 may connect only the storage unit 120 including the identified data management unit 130 to the control unit 110. In other words, the interface unit 310 may include a dedicated interface device that provides a connection between the controller 110 and the storage unit 120.

The interface unit 310 may connect the control unit 110 and the storage unit 120 by recognizing or reading the identifier of the data management unit 130. In other words, the interface unit 310 can mediate connection between the control unit 110 and the storage unit 120 by recognizing or reading the identifier of the data management unit 130.

The way in which the data managing unit 130 is identified by the interface unit 310 will be described in detail with reference to FIG. 4 to be described later.

The technical contents described with reference to FIG. 1 and FIG. 2 may be applied as they are, so a detailed description will be omitted below.

FIG. 4 illustrates a method for an interface unit to identify a data management unit according to an example.

FIG. 4 illustrates a method in which the interface unit 310 described above with reference to FIG. 3 identifies a data management unit and connects the storage unit 120 and the control unit 110. FIG. Also, as described above, the interface unit 310 may be included in the control unit 110 that operates as a host.

The interface unit 310 may connect the control unit 110 and the storage unit 120 by recognizing or reading the identifier of the data management unit 130.

For example, the interface unit 310 may connect the storage unit 120 including the data management unit including the predetermined identifier 'A' and the control unit 110. In other words, the storage unit 410 including the data management unit including the identifier 'B' and the storage unit 420 not including the data management unit may not be connected to the control unit 110.

The identifier included in the data management unit may be a component that enables a physical connection between the control unit 110 and the storage unit 120 and may be a storage unit for connection between the control unit 110 and the storage unit 120, 120, respectively. Alternatively, the identifier included in the data management unit may be the identification information that can be read and recognized by the interface unit 310 or the control unit 110 including the interface unit 310 or connected to the interface unit 310, A password of the data management unit, a serial number of the data management unit, an identifier of the data management unit, a key of the data management unit, and a public key of the data management unit.

Only the storage unit 120 including the data management unit identified and identified by the data management unit 310 can be connected to the control unit 110 by the interface unit 310 so that the storage unit 120 is separated from the electronic device 100 The security for the time-out data 150 can be maintained.

The technical contents described with reference to Figs. 1 to 3 can be applied as it is, and a detailed description will be omitted below.

FIG. 5 shows a storage device including a data management unit according to an embodiment and a host of the storage device.

In Fig. 5, the storage unit 120 described above with reference to Figs. 1 to 4 is shown. The illustrated storage unit 120 may be a storage device separate from the electronic device 100.

The control unit 125 may be a memory controller of the nonvolatile memory 128 and may include a data management unit 130 for managing the time-out data 150.

As described above, the time-out data 150 can be accessed only through the data management unit 130 from the host including the interface unit 310 capable of identifying the data management unit 130, and the time-out data 150 ) For a predetermined valid period of time. Here, the host may correspond to the control unit 110.

The technical contents described above with reference to Figs. 1 to 4 can be applied as they are, so that a more detailed description will be omitted below.

6 is a flowchart illustrating a method of managing time-out data according to an embodiment.

5 illustrates a method of managing the time-out data 150 stored in the nonvolatile memory 128 performed in the data management unit 130 described above with reference to FIGS. The data management unit 130 may be an electronic device that manages the time-out data 150. As described above, the time-out data 150 may be accessed only from the host of the non-volatile memory 128 through the data manager 130 and may only be accessible for a predetermined lifetime of the time-out data 150 .

In step 610, the data management unit 130 may encrypt information related to the validity period of the time-out data 150 stored in the non-volatile memory 128. [

In step 620, the data management unit 130 may identify whether a predetermined validity period of the time-out data 150 has elapsed. For example, the data management unit 130 may identify whether a predetermined validity period of the time-out data 150 has elapsed by analyzing the information 210 related to the validity period of the time-out data 150. [

In step 630, the data management unit 130 may delete the time-out data 150 stored in the nonvolatile memory 128 after a predetermined valid period of the time-out data 150 has elapsed. Deletion of the time-out data 150 may be a transfer of a delete request or command to the controller 125 of the non-volatile memory 128 (e.g., the secure erase command described above with reference to FIG. 1). Alternatively, the data management unit 130 may delete the time-out data 150 by accessing the time-out data 150 stored in the non-volatile memory 128. [

At step 640, the data manager 130 may send a signal indicating the deletion of the time-out data 150 to the host of the non-volatile memory 128. [ The signal indicating the deletion of the transmitted time-out data 150 may be output such that the deletion of the time-out data 150 can be recognized by the user or administrator of the electronic device 100. [ The host of the nonvolatile memory 128 may correspond to the control unit 110. [

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA) A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may be configured to configure the processing device to operate as desired or to process it collectively or collectively Device can be commanded. The software and / or data may be in the form of any type of machine, component, physical device, virtual equipment, computer storage media, or device , Or may be permanently or temporarily embodied in a transmitted signal wave. The software may be distributed over a networked computer system and stored or executed in a distributed manner. The software and data may be stored on one or more computer readable recording media.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

100: Electronic device
110:
120:
130:
125:
128: Nonvolatile memory
310:

Claims (13)

A storage unit for storing first time-out data;
A control unit for controlling the storage unit;
A data management unit for managing the first time-out data stored in the storage unit;
An interface unit connecting the storage unit and the control unit; And
When the first time-out data is deleted, an output unit
Lt; / RTI >
Wherein the first time-out data is accessed only through the data management unit and is accessible only for a predetermined validity period of the first time-out data,
Wherein the data management unit encrypts the information on the predetermined validity period of the first time-out data and updates the first time-out data and the second time-out data each time new second time- Encrypts information about the expiration date,
Wherein the interface unit connects the control unit and the storage unit by recognizing the identifier of the data management unit,
Wherein the identifier comprises:
Wherein the control unit is a dedicated port for connection between the control unit and the storage unit, or is identification information that can be read and recognized by the interface unit. delete The method according to claim 1,
Wherein the data management unit deletes the first time-out data stored in the storage unit and transmits a signal indicating deletion of the first time-out data to the control unit when the predetermined validity period elapses. The method according to claim 1,
Wherein the control unit operates as a host for the storage unit,
Wherein the access to the first time-out data stored in the storage unit is accepted subject to authentication by the data management unit. The method according to claim 1,
Wherein the data management unit is disposed in the control unit and deletes the first time-out data stored in the storage unit when the predetermined validity period elapses. 6. The method of claim 5,
When the predetermined validity period has elapsed, the data management unit transmits a secure erase command for the first time-out data to the storage unit,
Wherein the first time-out data is logically and physically deleted from the storage by the secure erase command. The method according to claim 6,
Wherein the physical deletion of the first time-out data is an initialization of the bits into which the first time-out data is written. The method according to claim 1,
Wherein the data management unit is disposed in the storage unit and deletes the first time-out data stored in the storage unit when the predetermined validity period elapses. 9. The method of claim 8,
Wherein the data management unit physically deletes the first time-out data by deleting the first time-out data in the storage unit on a page, block or sector basis when the predetermined validity period elapses. delete delete 9. The method of claim 8,
Wherein the storage is detachable from the electronic device. A non-volatile memory for storing first time-out data;
A control unit for controlling the nonvolatile memory;
A data management unit for managing the first time-out data stored in the non-volatile memory in the control unit;
An interface unit connecting the nonvolatile memory and the control unit; And
When the first time-out data is deleted, an output unit
Lt; / RTI >
Wherein the first time-out data is accessed only from the host identifying the data manager through the data manager and is accessible only for a predetermined validity period of the first time-out data, Encrypts information on the validity period of the first time-out data and the second time-out data,
Wherein the data management unit encrypts information on the predetermined validity period of the first time-out data,
Wherein the interface unit connects the control unit and the nonvolatile memory by recognizing the identifier of the data management unit,
Wherein the identifier comprises:
Volatile memory is a dedicated port for connection between the control unit and the non-volatile memory, or is identification information that can be read and recognized by the interface unit.

Images