Secured redundant memory subsystem

• US 20060053308A1
• Filed: 09/08/2004
• Published: 03/09/2006
• Est. Priority Date: 09/08/2004
• Status: Abandoned Application

• Current Assignee: Raidy 2 Go Limited
• Original Assignee: Raidy 2 Go Limited
• Inventors: Zimmerman, Israel
• Application Number:
  US10/935,634
• Publication Number:
  US 20060053308A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A storage device consists of multiple solid state memory devices and a memory controller. The memory devices are configured as a redundant array, such as a RAID memory array. The memory controller performs data encryption to provide secured access to the array. The encryption may be performed with an encryption data sequence which is stored on a separate memory element.

Claims

1. A storage device, comprising:

a plurality of solid state memory devices configured as a redundant array, and

a memory controller associated with said memory array, for performing data encryption to provide secured access to said array.

2. A storage device according to claim 1, wherein said controller comprises an encryption element for encrypting data with an encryption data sequence stored on a memory element external to said array.

3. A storage device according to claim 2, wherein said encrypting is performed upon sector access.

4. A storage device according to claim 2, wherein each of said memory devices is subdivided into multiple sectors, and wherein said encryption data sequence is grouped into multiple blocks, said encryption element comprising:

an encryption mapper, for mapping each of said sectors to one of said blocks; and

a data encrypter associated with said encryption mapper, for encrypting data associated with a first specified sector with a corresponding mapped block of said encryption data sequence.

5. A storage device according to claim 4, wherein the size of a block and the size of a sector are essentially equal.

6. A storage device according to claim 4, wherein said encrypting comprises XORing said data associated with said first specified sector with a corresponding mapped block of said encryption data sequence.

7. A storage device according to claim 4, wherein said encryption element further comprises a data decrypter for decrypting stored data from a second specified sector with a corresponding mapped block of said encryption data sequence.

8. A storage device according to claim 7, wherein said decrypting comprises XORing data stored in said second specified sector with said corresponding block of said encryption data sequence.

9. A storage device according to claim 1, wherein said controller comprises an encryption data memory for storing said encryption data sequence.

10. A storage device according to claim 9, wherein said encryption data memory comprises a flash memory.

11. A storage device according to claim 4, wherein said mapping is cyclic.

12. A storage device according to claim 2, wherein said encrypting comprises XORing said data with said encryption data sequence in accordance with a predefined mapping.

13. A storage device according to claim 2, wherein said controller is operable to erase said encryption data sequence upon occurrence of a trigger event.

14. A storage device according to claim 13, wherein said trigger event comprises receipt of an external trigger signal.

15. A storage device according to claim 13, wherein said trigger event comprises receiving an incorrect password for data access.

16. A storage device according to claim 2, wherein said encryption data sequence is provided externally.

17. A storage device according to claim 2, wherein said controller comprises an encryption generator for generating said encryption data sequence.

18. A storage device according to claim 1, wherein said memory devices comprise flash memories.

19. A storage device according to claim 1, wherein said memory devices comprise small form factor memories.

20. A storage device according to claim 18, wherein said memory devices comprise small form factor memories.

21. A storage device according to claim 20, wherein said memory devices comprise one of a group of devices comprising:

CompactFlash (CF™

), Multimedia Card (MMC), Secure Digital (SD), Memory stick, Smart Media, and xD Picture Card.

22. A storage device according to claim 1, wherein said redundancy is in accordance with a Redundant Array of Independent Disks (RAID) standard.

23. A storage device according to claim 1, wherein said controller is operable to provide data striping.

24. A storage device according to claim 1, wherein said controller is operable to provide disk mirroring.

25. A storage device according to claim 1, wherein said controller is operable to provide parity information.

26. A storage device according to claim 25, wherein said parity information is stored on a dedicated one of said memory devices.

27. A storage device according to claim 25, wherein said parity information is distributed across more than one memory device.

28. A storage device according to claim 1, wherein said controller is operable to provide error correction.

29. A storage device according to claim 1, wherein said controller is operable to provide data caching.

30. A storage device according to claim 1, wherein said controller comprises a field programmable gate array (FGPA).

31. A storage device according to claim 1, further comprising a data interface for inputting data and outputting data.

32. A storage device according to claim 31, wherein said data interface comprises an Advanced Technology Attachment (ATA) interface.

33. A storage device according to claim 31, wherein said data interface comprises a serial ATA (SATA) interface.

34. A storage device according to claim 31, wherein said data interface comprises a Universal Serial Bus (USB) interface.

35. A storage device according to claim 31, wherein said data interface comprises an IEEE 1394 interface.

36. A storage device according to claim 31, wherein said data interface comprises a small computer system interface (SCSI).

37. A storage device according to claim 31, wherein said data interface comprises an Ethernet interface.

38. A storage device according to claim 1, wherein said controller comprises a control interface for inputting and outputting control data.

39. A storage device according to claim 38, wherein said control data is for performing at least one of a group of functions comprising:

programming said controller, inputting an encryption data sequence, inputting encryption data sequence parameters, outputting an encryption data sequence, inputting a password, upgrading software, diagnostic testing, selecting a redundancy method, establishing system definitions, and formatting said memory array.

40. A data securer, for securing stored data, comprising:

an encryption data memory, for storing an encryption data sequence; and

a data encrypter, for encrypting data stored in a separate memory element using said encryption data sequence.

41. A data securer according to claim 40, wherein said memory element is external.

42. A data securer according to claim 40, further comprising a data storage unit for storing encrypted data.

43. A data securer according to claim 40, wherein said data storage unit comprises a RAID memory.

44. A data securer according to claim 40, wherein said encrypting comprises XORing stored data with said encryption data sequence in accordance with a predefined mapping.

45. A data securer according to claim 40, further comprising a data decrypter for decrypting stored data using said encryption data sequence.

46. A data securer according to claim 45, wherein said decrypting comprises XORing stored data with said encryption data sequence in accordance with a predefined mapping.

47. A data securer according to claim 40, further comprising a controller for managing data security.

48. A data securer according to claim 40, wherein said controller is operable to erase said encryption data sequence upon occurrence of a trigger event.

49. A data securer according to claim 48, wherein said trigger event comprises receipt of an external trigger signal.

50. A data securer according to claim 40, wherein said encryption data sequence is provided externally.

51. A data securer according to claim 47, wherein said controller comprises an encryption generator for generating said encryption data sequence.

52. A data securer according to claim 40, wherein said encryption data memory comprises a flash memory.

53. A data securer, for securing data with an encryption data sequence, said data being stored in a memory element subdivided into multiple sectors, and said encryption data sequence being grouped into multiple blocks, comprising:

an encryption mapper, for mapping each of said sectors to one of said blocks; and

a data encrypter, for encrypting data associated with a first specified sector with a corresponding mapped block of said encryption data sequence.

54. A data securer according to claim 53, wherein the size of a block and the size of a sector are essentially equal.

55. A data securer according to claim 53, further comprising a data decrypter for decrypting stored data from a second specified sector with a corresponding mapped block of said encryption data sequence.

56. A data securer according to claim 53, wherein said encrypting comprises XORing said associated data with said corresponding mapped block of said encryption data sequence.

57. A data securer according to claim 55, wherein said decrypting comprises XORing data stored in said second specified sector with said corresponding block of said encryption data sequence.

58. A data securer according to claim 53, further comprising an encryption data memory for storing said encryption data sequence.

59. A method for securing stored data, comprising:

configuring a plurality of solid state memory devices as a redundant array, and

encrypting data for storage on said array with an encryption data sequence stored on a memory element external to said array.

60. A method for securing stored data to claim 59, further comprising storing said encrypted data in said array.

61. A method for securing stored data to claim 59, wherein each of said memory devices is subdivided into multiple sectors, said encrypting comprising:

subdividing said encryption data sequence into multiple blocks;

mapping each of said sectors to a corresponding one of said blocks; and

encrypting data associated with a first specified sector with said corresponding mapped block of said encryption data sequence.

62. A method for securing stored data to claim 61, wherein the size of a block and the size of a sector are essentially equal.

63. A method for securing stored data to claim 61, wherein said encrypting comprises XORing said associated data with said corresponding mapped block of said encryption data sequence.

64. A method for securing stored data to claim 61, further comprising decrypting data stored in a second specified sector with a corresponding mapped block of said encryption data sequence.

65. A method for securing stored data to claim 59, further comprising outputting said decrypted data.

66. A method for securing stored data to claim 64, wherein said decrypting comprises XORing data stored in said sector with said corresponding mapped block of said encryption data sequence.

67. A method for securing stored data to claim 59, further comprising inputting said encryption data sequence.

68. A method for securing stored data to claim 59, further comprising storing said encryption data sequence in an encryption sequence memory.

69. A method for securing stored data to claim 60, further comprising erasing said encryption data sequence upon occurrence of a trigger event.

70. A method for securing stored data to claim 59, wherein said redundancy is in accordance with a Redundant Array of Independent Disks (RAID) standard.

71. A method for securing stored data, comprising:

storing an encryption data sequence in an encryption data memory, and

encrypting data associated with a separate memory device using said encryption data sequence.

72. A method for securing stored data, according to claim 71, wherein said memory element is subdivided into multiple sectors, said encrypting comprising:

subdividing said encryption data sequence into multiple blocks;

mapping each of said sectors to a corresponding one of said blocks; and

encrypting data associated with a first specified sector with said corresponding block of said encryption data sequence.

73. A method for securing stored data to claim 72, wherein the size of a block and the size of a sector are essentially equal.

74. A method for securing stored data, according to claim 71, said encrypting comprises XORing stored data with said encryption data sequence in accordance with a predefined mapping.

75. A method for securing stored data to claim 72, further comprising decrypting data stored in a second specified sector with a corresponding mapped block of said encryption data sequence.

76. A method for securing stored data, according to claim 71, further comprising erasing said encryption data sequence upon occurrence of a trigger event.

77. A method for securing stored data, according to claim 71, further comprising generating said encryption data sequence.

78. A method for securing stored data, according to claim 71, further comprising generating said mapping.

79. A method for securing stored data, said data being stored in a memory element subdivided into multiple sectors, comprising:

providing an encryption data sequence;

subdividing said encryption data sequence into multiple blocks wherein the size of a block and the size of a sector are essentially equal;

mapping each of said sectors to a corresponding one of said blocks; and

encrypting data associated with a first specified sector with said corresponding block of said encryption data sequence.

80. A method for securing stored data according to claim 79, further comprising decrypting stored data from a second specified sector with a corresponding block of said encryption data sequence.

81. A method for securing stored data according to claim 79, wherein said encrypting comprises XORing said associated data with said corresponding block of said encryption data sequence.

82. A method for securing stored data according to claim 80, wherein said decrypting comprises XORing data stored in said second specified sector with said corresponding block of said encryption data sequence.