Restricted data access

• US 20020138747A1
• Filed: 03/20/2002
• Published: 09/26/2002
• Est. Priority Date: 03/20/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Clarke, John Richard
• Application Number:
  US10/101,498
• Publication Number:
  US 20020138747A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00557 wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas

Abstract

A data storage medium 10 adapted to restrict access to data 20 stored thereupon by encrypting control login 18, 22 which directs storage devices 62, 64 where to look for the data 20 on the storage medium 10 and a method for providing such a storage medium 10.

Claims

1. A data storage device having a data storage medium and comprising subject matter data stored on said medium, and also having control data stored on said medium, said control data, in use, providing information to a reading device, said control data enabling said reading device to find said subject matter data, wherein said control data is encrypted such that use of said control data by a reading device is restricted to a reading device adapted to decrypt said control data.

2. A device according to claim 1 wherein said control data enables said reading device to read said subject matter data.

3. A device according to claim 2 which comprises a removable data storage device adapted to be introduced into said reading device for reading of said subject matter data and removed therefrom.

4. A device according to claim 1 wherein said control data is of at least two types:

a first type comprising medium related control data, and a second type comprising specific subject matter control data.

5. A device according to claim 1 which has a portion thereof in which said control data is stored, and a portion thereof in which said subject matter data is stored.

6. A device according to claim 1 wherein said control data comprises medium control data including at least one of the following:

a header;

a footer;

block addressing;

file allocation tables;

directories;

sequencing information;

error correction control (ECC) data;

device striping control data;

bad block tables;

media tags.

7. A device according to claim 1 wherein said control data comprises specific subject matter control data which contains information regarding a location of said subject matter data within said medium.

8. A device according to claim 1 wherein said control data is encrypted asymmetrically and said subject matter data is encrypted symmetrically.

9. A method of restricting access to subject matter data stored on a data storage device comprising the steps of:

(i) writing said subject matter data to a storage medium;

(ii) generating control data associated with management of said subject matter data stored on said data storage device, and associated with management of said data storage device;

(iii) encrypting said control data; and

(iv) writing said encrypted control data to said storage medium.

10. The method of claim 9 including writing said control data and said subject matter data to different portions of said data storage device.

11. The method of claim 9 including encrypting said subject matter data.

12. The method of claim 9 including decrypting control data and locating said subject matter data within said data storage medium using said decrypted control data.

14. The method of claim 13 including providing said control data in the form of medium related control data and subject matter control data.

15. The method of claim 13 including decrypting encrypted subject matter data stoned upon said medium.

17. A writer according to claim 16 which is adapted to write said subject matter data in a fragmented form at different physical locations on said medium.

18. A writer according to claim 16 wherein said writer writes said control data, to a predetermined location in said medium, in use.

19. A writer according to claim 16 wherein said writer writes a pointer to said control data located to a predetermined location in said medium, in use.

20. A writer according to claim 16 wherein said subject matter data is encrypted prior to being written to said data storage medium.

13. A method of restricting access to data stored on a data storage medium comprising the steps of:

(i) providing a data storage device having a data storage medium containing subject matter data and encrypted control data;

(ii) decrypting said control data so as to enable a reader to use said data storage device and to find an address of said subject matter data in said data storage medium;

(iii) using said decrypted control data to locate said subject matter data in said medium; and

(iv) reading said subject matter data from said medium.

16. A data writer adapted to write data to a data storage medium of a data storage device, said writer having a data writing head and a controller, said controller controlling said data writing head, in use, and said controller receiving in use subject matter data to be stored on said medium;

and being adapted to create control data to accompany said subject matter data, said control data providing information to enable a reading device to use said data storage device and to locate and read said subject matter data on said medium, in use, and wherein said writer is adapted to encrypt said control data prior to said control data being written to said medium.

21. A reader adapted to read a compatible data storage device, said data storage device including a data storage medium, said medium having subject matter data and encrypted control data stored therein, said encrypted control data, when read and decrypted, enabling said reader to find and read said subject matter data in a meaningful way, and wherein said reader has a read head and a controller, said controller, in use, directing said read head to read a predetermined region of said medium in order to read said encrypted control data, and said controller being adapted to decrypt said encrypted control data to access said control data, and to use said control data to direct said head to read said subject matter data.

22. A method of writing data to a data storage medium comprising the steps of:

(i) providing a writer having a data writing head;

(ii) receiving subject matter data at said writer;

(iii) writing said subject matter data to said medium;

(iv) creating control data, indicative of data medium formatting of, and of a location of said subject matter data on said medium;

(v) encrypting said control data; and

(vi) writing said encrypted control data to said medium.

23. A method of reading data from a data storage medium comprising the steps of:

(i) providing a reader having a read head;

(ii) directing said reader where to find encrypted control data on said medium;

(iii) accessing said encrypted control data;

(iv) decrypting said encrypted control data; and

(v) utilising said control data to direct said read head to read subject matter data.

24. A computer readable medium having a program recorded thereupon for use with a data writer adapted to write data to a storage medium of a data storage device, said data writer having a data writing head and a controller controllable by said program;

wherein said program controls said data writing head, in use, and said controller receiving subject matter data to be stored on said medium; and

said program creating, when run, control data to accompany said subject matter data, said control data providing information to enable a reading device to use said data storage device and to locate and read said subject matter data on said medium, and in which said program is adapted to encrypt said control data and to cause encrypted control data to be written to said medium.

25. A computer readable medium having a program recorded thereupon for use with a reader having a read head and a controller and being adapted to read a compatible data storage device, the data storage device including a data storage medium, said medium having subject matter data and encrypted control data stored therein, said encrypted control data, when read and decrypted, enabling a reader to find and read said subject matter data in a meaningful way, wherein said program when run causing said read head to read a predetermined region of said medium in order to read said encrypted control data, and said program causing decryption of said encrypted control data to access said control data, and using said control data to direct said head to read said subject matter data.

26. A computer readable medium having a control data decrypt program recorded thereupon which causes, in use, a reader to be able to read a data storage device, said data storage device comprising a data storage medium and comprising subject matter data stored on said medium, and also having control data stored on said medium, said control data, in use, providing information to said reader to enable said reader to find said subject matter data, wherein said control data is encrypted such that use of said control data by said reader is possible after said control data decrypt program has decrypted said control data.

27. A computer readable medium having a program recorded thereupon which causes, in use, a data writer to execute a method of restricting access to subject matter data stored on a data storage device comprising the steps of:

(i) writing said subject matter data to a storage medium;

(ii) generating control data associated with management of said subject matter data stored on said data storage device, and associated with management of said data storage device;

(iii) encrypting said control data; and

(iv) writing said encrypted control data to said storage medium.

28. A computer readable medium having a program recorded thereupon which causes, in use, a data reader to execute a method of restricting access to data stored on a data storage device having a data storage medium containing subject matter data and encrypted control data, said method performed by said program comprising:

(i) decrypting said control data so as to enable a reader to use said data storage device and to find an address of subject matter data in said data storage medium;

(ii) using said decrypted control data to locate said subject matter data in said medium; and

(iii) reading said subject matter data from said medium.

29. A computer readable medium having a program recorded thereupon which causes, in use, a data writer having a data writing head to execute a method of writing data to a data storage medium comprising the steps of:

(i) receiving subject matter data at said writer;

(ii) writing said subject matter data to said medium;

(iii) creating control data, indicative of data medium formatting of, and of a location of said subject matter data on, said medium;

(iv) encrypting said control data; and

(v) writing said encrypted control data to said medium.

30. A computer readable medium having a program recorded thereupon which causes, in use, a data reader having a read head to execute a method of reading data from a data storage medium comprising the steps of:

(i) directing said reader where to find encrypted control data on said medium;

(ii) accessing said encrypted control data;

(iii) decrypting said encrypted control data; and

(iv) utilising said control data to direct said read head to read subject matter data.

31. A data storage device having a data storage medium and comprising subject matter data stored on said medium, and also having control data stored on said medium, said control data, in use, providing information to a reading device, said control data enabling said reading device to find said subject matter data, said control data comprising specific subject matter control data which contains information regarding a location of said subject matter data within said medium, said control data being encrypted such that use of said control data by a reading device is restricted to a reading device adapted to decrypt said control data, and said medium having a portion thereof in which said control data is stored, and a portion thereof in which said subject matter data is stored.

32. A data storage device having a data storage means and comprising subject matter data stored on said storage means, and also having control data stored on said storage means, said control data, in use, providing information to data reading means, said control data enabling said data reading means to locate said subject matter data, said control data being encrypted such that use of said control data by said data reading means is restricted to data reading means adapted to decrypt said control data.