TWI612440B - Information storage system with information security protection - Google Patents

Abstract

A data storage system with information security protection includes a solid-state storage device and at least one activation device selectively connected to the solid-state storage device. Wherein, the solid-state storage device has a data storage unit and an information connection to the data storage unit and writes at least one control process of firmware data triggered by an activation key to decide to perform a predetermined task on the data storage unit unit. The activation device has a data processing unit pre-written with the activation key, and the data processing unit has a pairing mode in which the device identification code is retrieved and stored for the first information connection with the control processing unit, and An information connection with the control processing unit is performed again, and the stored device identification code is compared to output the activation mode of the activation key to the control processing unit.

Description

Data storage system with information security protection

The invention relates to a data storage system, especially a data storage system with information security protection.

With the widespread application of various types of information equipment, more and more users computerize and store important operational data such as reports and documents in various types of information equipment to facilitate operations. However, today's various types of information equipment mainly use various hard disk storage devices (Hard Disk Drive, HDD) to store data, but general hard disk storage devices do not have any information security protection, thieves only need to activate the information equipment That is, the data of the hard disk storage device can be read, copied, or written arbitrarily, resulting in the outflow of important data.

Therefore, all the relevant manufacturers of hard disk storage devices have proposed improvements to information protection, as disclosed in the Patent Announcement No. I382316 of the Republic of China, which discloses a flash drive serial combination structure with security functions, including plural data Disc and a key disc, at least one of the data discs is divided into a common area and a private area, and the use of the private area needs to be executed in an operating system through a utility program in the key disc memory to perform the private area Read. However, although the above embodiment uses the key disc as a condition for reading the private area to achieve the purpose of security protection, the data disc is divided into the public area and the private area, and the operating system is normally hidden from the operating system. The implementation of the private area is undoubtedly to reduce the capacity of the data disc to store data. In addition, the above patents need to be implemented through the Only the utility program in the key disk memory can read the data in the private area, which is extremely inconvenient to use and cannot provide the effect of layered protection. According to this, the inventor of the present case urgently thinks of another embodiment to improve the above problems.

The main purpose of the present invention is to provide a data storage system which is applied to a solid-state hard disk device and does not need to be implemented with other software programs.

To achieve the above object, the present invention provides a data storage system with information security protection. The data storage system includes a solid-state storage device and at least one startup device, wherein the solid-state storage device has a device identification code and includes a data storage unit 1. An information connection to the data storage unit and writing at least one control processing unit that triggers activation with a start key to determine the firmware data to perform a predetermined task on the data storage unit, an information connection to the control processing unit and accept A data transmission interface from data transmitted by an information device and a device connection port for information connection to the control processing unit. The activation device can be selectively assembled on the device port and includes a data processing unit pre-written with the activation key. The data processing unit has a first time through the device port and the control processing unit Information connection to retrieve the device identification code and store it in a pairing mode, and output the activation key to the control processing unit upon information connection with the control processing unit via the device port again to compare the recorded device identification code Enable mode.

In one embodiment, the device port and the activation device are respectively a USB transmission specification, and the activation device transmits information through the transmission / reception differential signal terminals D + and D- to the control processing unit to transmit the activation money key.

In one embodiment, the solid-state storage device further includes a data connection line for connecting the control processing unit and connecting the activation device to transfer the device identification code and the activation key.

In one embodiment, the control processing unit is written with a plurality of firmware data, and the activation key required for activation of each of the firmware data is different.

In one embodiment, the data storage unit may be selected from the group consisting of a single-layer storage flash memory, a multi-layer storage flash memory, and a triple-layer storage flash memory One.

In one embodiment, the default task may be one selected from the group consisting of a data write prevention task, a data delete task, a data storage unit destruction task, and an encrypted data write task.

In one embodiment, the solid-state storage device further includes a circuit board carrying the data storage unit, the control processing unit, the data transmission interface and the device connection port, and a circuit board accommodating the circuit board and having a corresponding device connection The hard disk case with through holes assembled in the port.

Compared with the conventional structure, the structure disclosed by the present invention has the following characteristics:

1. The data storage system of the present invention does not perform magnetic division on the solid-state storage device to limit the reading operation, so that users can fully use the data storage space provided by the solid-state storage device.

2. The data storage system of the present invention writes at least one piece of firmware data to perform the preset task into the control processing unit, and the activation key required for the activation of each piece of firmware data is different. This provides the effect of layered security protection. In addition, the firmware data does not need to be matched with other software, and only after confirming the activation key and the device identification code, the control processing unit is allowed to perform the preset task.

1‧‧‧Data storage system

11‧‧‧Solid storage device

111‧‧‧Data storage unit

112‧‧‧Control processing unit

113‧‧‧Data transmission interface

114‧‧‧Device port

115‧‧‧ circuit board

116‧‧‧Hard disk case

117‧‧‧Assembly through hole

118‧‧‧Data cable

12‧‧‧Starting device

121‧‧‧Data processing unit

2‧‧‧Information equipment

21‧‧‧Host transmission interface

3‧‧‧Computer case

D1‧‧‧ device identification code

D2‧‧‧Activate key

D +, D-‧‧‧Transmit / receive differential signal terminal

S01, S02‧‧‧Step

FIG. 1 is a schematic structural diagram of an embodiment of a data storage system with information security protection according to the present invention.

FIG. 2 is a schematic diagram of unit composition of an embodiment of a data storage system with information security protection according to the present invention.

FIG. 3 is a partial structural schematic diagram of an activation device of another embodiment of a data storage system with information security protection of the present invention.

FIG. 4 is a schematic flowchart of an embodiment of a data storage system with information security protection according to the present invention.

FIG. 5 is a schematic structural diagram of another embodiment of a data storage system with information security protection according to the present invention.

The detailed description and technical content of the present invention are described below in conjunction with the drawings:

Please refer to FIGS. 1 and 2. The data storage system 1 with information security protection of the present invention is applied to an information device 2. The data storage system 1 may be composed of a solid-state storage device 11 and a start-up device 12, wherein the solid-state storage device 11 has a device identification code D1, which provides the information equipment 2 can be directly identified The connected device means that the device identification code D1 for the information equipment 2 represents the solid-state storage device 11. In addition, the device identification code D1 possessed by each of the solid-state storage devices 11 is different. Further, the solid-state storage device 11 includes a data storage unit 111, a control processing unit 112 for information connection to the data storage unit 111, a data transmission interface 113 and a device connection port 114 for information connection to the control processing unit 112, respectively. More specifically, the data storage unit 111 is mainly used to store data data received from the information device 2 or to provide the information device 2 to read the data data stored in the data storage unit 111. The data storage unit 111 may be selected from a single-layer storage flash memory (SLC NAND Flash), a multi-layer storage flash memory (MLC NAND Flash), and a three-layer storage flash memory (TLC NAND Flash) is implemented in one of the groups. Furthermore, the control processing unit 112 receives the read command or write command issued by the information device 2 to the solid-state storage device 11 via the data transmission interface 113, and then controls the data storage unit 111 to read or write the corresponding data data. For the present invention In this case, the control processing unit 112 further writes at least one piece of firmware data triggered by an activation key D2 to decide to perform a predetermined task on the data storage unit 111. More specifically, the control processing unit 112 of the present invention may be an integrated circuit, and at least one firmware data is burned while the solid-state storage device 11 is made, and each of the firmware data executes the The default tasks are not the same, and the activation key D2 required for each activation of the firmware data is different. In addition, the data transmission interface 113 of the present invention is mainly used to generate an information connection with a host transmission interface 21 of the information device 2, and the data transmission interface 113 may be implemented by a serial advanced technology attachment (SATA) standard On the other hand, the device port 114 of the present invention can be implemented using the USB transmission standard. More specifically, the solid-state storage device 11 of the present invention further includes a circuit board 115 carrying the data storage unit 111, the control processing unit 112, the data transmission interface 113 and the device connection port 114, and a circuit board accommodating the circuit board 115 的 硬盘 壳 116。 115 hard disk housing 116. The hard disk casing 116 further has a pair of assembly through holes 117 opened corresponding to the device connection ports 114, and the opening positions of the assembly through holes 117 can be corresponding to the positions of the device connection ports 114 disposed on the circuit board 115 Adjustment.

Based on the above, in one embodiment, the activation device 12 of the present invention can be implemented in a substantial form of an external hot-swap storage device. The activation device 12 can be selectively assembled on the device connection port 114. The activation device 12 includes a data processing unit 121 pre-written with the activation key D2. Furthermore, the data processing unit 121 has a first information connection via the device connection port 114 and the control processing unit 112 to retrieve The device identification code D1 is fetched and stored as a pairing mode, and once the device connection port 114 and the control processing unit 112 are connected again, the stored device identification code D1 is compared and the activation money is output to the control processing unit 112 Enable mode of key D2. Further, the data processing unit 121 can also be implemented by an integrated circuit, and the data processing unit 121 writes in advance the stored activation key D2 when the activation device 12 is made and uses data to burn Way of writing Enter and restrict the rewriting or deletion of the activation key D2. Therefore, after the activation device 12 of the present invention is manufactured, it only has a single activation key D2 and can only activate the firmware data with the same activation key D2 as the activation condition. Furthermore, as can be seen from the above, the activation device 12 can be implemented by the physical form of the external hot-swap storage device. In one embodiment, the activation device 12 is the same as the device connection port 114, which can be The USB transmission specification is implemented as shown in Figure 1 and Figure 3. Further, the activation device 12 may be a transmission / reception differential signal terminal D + and D- included in the USB transmission specification and is connected to the control processing unit 112 to transmit the activation key D2. Furthermore, the boot device 12 can be implemented as a USB3.0 transmission standard.

In order to more specifically explain the implementation process of the data storage system with information security protection of the present invention, the description will now be made with reference to FIGS. 1 to 4 as follows. At the initial stage of implementation of the data storage system 1 with information security protection of the present invention, the control processing unit 112 included in the solid-state storage device 11 is written with at least one firmware data, and in this embodiment, the control is exemplified The processing unit 112 writes a first firmware data and a second firmware data, wherein the default task executed by the first firmware data is the data write prevention task, and the second firmware data is executed The preset task is the task of destroying the data storage unit. On the other hand, at the beginning of the present embodiment, the activation device 12 has written the activation key D2 that can activate the first firmware data into the data processing unit 121. At the same time that the solid-state storage device 11 and the startup device 12 are assembled with each other for the first time, the data processing unit 121 of the startup device 12 enters the pairing mode to retrieve the device identification code D1 of the solid-state storage device 11 and The device identification code D1 is stored in the data processing unit 121 (step S01). In this way, the starting device 12 can only be paired with the solid-state storage device 11 and cannot be implemented on another solid-state storage device 11. After that, the user can separate the startup device 12 from the solid-state storage device 11, and then connect the startup device 12 to the solid-state storage device 11 again when the preset task to store the firmware data is to be performed, And this connection, the information The processing unit 121 first compares whether the device identification code D1 obtained from the solid-state storage device 11 is the same as the device identification code D1 stored in the data processing unit 121. If the device identification code D1 is the same, the data processing unit 121 The control processing unit 112 of the solid-state storage device 11 outputs the activation key D2, and after receiving the activation key D2, the control processing unit 112 determines the firmware data that the activation key D2 can activate. As mentioned above, it is assumed that the activation key D2 is used to activate the first firmware data in this embodiment, so the activation key D2 and the activation of the first firmware data are determined by the control processing unit 112 to determine the activation key When D2 is the same, the control processing unit 112 executes the data write prevention task, prohibiting the information device 2 from performing data write operations to the data storage unit 111 (step S02). Accordingly, if the present invention is implemented, there may be a plurality of activation devices 12, and each activation device 12 can only activate one of the firmware data stored by the control processing unit 112.

Please refer to FIG. 5. In one embodiment, the solid-state storage device 11 further includes an information connection to the control processing unit 112 and is used to connect the activation device 12 to transmit the data of the device identification code D1 and the activation key D2 Connecting line 118. More specifically, one end of the data connection cable 118 can be connected to the device port 114, and the other end can be fixed to a computer case 3 for users to selectively connect the activation device 12 to the Information link 118.

In summary, the data storage system with information security protection of the present invention includes a solid-state storage device and at least one activation device selectively connected to the solid-state storage device. Wherein, the solid-state storage device has a data storage unit and an information connection to the data storage unit and writes at least one control process of firmware data triggered by an activation key to decide to perform a predetermined task on the data storage unit unit. The activation device has a data processing unit pre-written with the activation key, and the data processing unit has a pairing mode in which the device identification code is retrieved and stored for the first information connection with the control processing unit, and One is connected to the control processing unit again to compare the stored information The device identification code outputs the enabling mode of the activation key to the control processing unit. In this way, a data storage system that can implement information security protection for the solid-state storage device without the need for computer software is provided.

The present invention has been described in detail above, but the above is only one of the preferred embodiments of the present invention, and it should not limit the scope of the present invention. That is, all changes and modifications made within the scope of the application of the present invention shall still fall within the scope of the patent of the present invention.

1‧‧‧Data storage system

11‧‧‧Solid storage device

113‧‧‧Data transmission interface

114‧‧‧Device port

116‧‧‧Hard disk case

117‧‧‧Assembly through hole

12‧‧‧Starting device

21‧‧‧Host transmission interface

Claims (7)

A data storage system with information security protection includes: a solid-state storage device with a device identification code that is not repeated, and includes a data storage unit, an information connection to the data storage unit and writing at least one to a start-up fund The key trigger is activated to determine the firmware processing unit that performs a predetermined task on the data storage unit, a data transmission interface that connects to the control processing unit and accepts data transmitted from an information device, and an information connection to the control Device port of the processing unit; and at least one activation device, which is selectively assembled on the device port and includes a data processing unit pre-written with the activation key, the data processing unit having a device port The first information connection with the control processing unit to retrieve the device identification code and store it as a pairing mode, and once the device connection port is connected to the control processing unit again through information connection to compare the stored device identification code to the The control processing unit outputs the enabling mode of the activation key; wherein, the device identification is stored The start code-based device that can only be paired with the use of solid state storage device, and not to another embodiment of the solid state storage device. The data storage system with information security protection according to claim 1, wherein the device port and the activation device are respectively a USB transmission specification, and the activation device is a transmission / reception differential signal terminal D + and D- Connect with the control processing unit to transfer the activation key. The data storage system with information security protection according to claim 1 or 2, wherein the solid-state storage device further includes an information connection to the control processing unit and for assembling the activation device to transmit the device identification code and the activation key Data cable. The data storage system with information security protection according to claim 1, wherein the control processing unit is written with a plurality of firmware data, and the activation key required for each firmware data activation is different. The data storage system with information security protection according to claim 1, wherein the data storage unit is selected from a single-layer storage flash memory, a multi-layer storage flash memory, and a three-layer storage flash One of the groups formed by flash memory. The data storage system with information security protection according to claim 1, wherein the preset task is selected from a data write prevention task, a data deletion task, a data storage unit destruction task, and an encrypted data writing task Form one of the groups. The data storage system with information security protection according to claim 1, wherein the solid-state storage device further includes a circuit board carrying the data storage unit, the control processing unit, the data transmission interface and the device port, and a capacitor The circuit board is installed and has a pair of hard disk housings with assembly through holes opened corresponding to the device connection ports.