Data storage device with built-in data protection for ultra sensitive applications

• US 20070271471A1
• Filed: 05/22/2006
• Published: 11/22/2007
• Est. Priority Date: 05/22/2006
• Status: Active Grant

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: Hsia, Yiao-Tee, Merzlikine, Alexei
• Granted Patent: US 7,780,079 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 2220/2516 Hard disks

Abstract

An apparatus comprises a data storage medium; a remote unit; and an authorization unit for encrypting information to be stored on the storage medium and for controlling access to data stored on the data storage medium in response to the access control signals received from the remote unit. A method of controlling access to data stored on the data storage medium is also provided.

Claims

1. An apparatus comprising:

a data storage medium;

a remote unit; and

an authorization unit for encrypting information to be stored on the storage medium and for controlling access to data stored on the data storage medium in response to an access control signal received from the remote unit.

2. The apparatus of claim 1, wherein the authorization unit comprises:

a processor for encrypting information to be stored on the storage medium; and

the access control signal includes a private key for use by the processor.

3. The apparatus of claim 1, further comprising:

a transmitter for transmitting information about the status of the data storage device to the remote unit.

4. The apparatus of claim 1, wherein the authorization unit includes a public key for encrypting information to be stored on the storage medium.

5. The apparatus of claim 1, wherein the remote unit comprises:

a user interface;

a key memory;

a transmitter; and

a processor for controlling the transfer of a key from the key memory to the transmitter in response to the user interface.

6. The apparatus of claim 1, wherein the remote unit communicates with the authorization unit over a wireless channel.

7. The apparatus of claim 1, further comprising:

a second remote unit for providing a second access control signal to the authorization unit in response to an altimeter.

8. The apparatus of claim 1, further comprising:

a second remote unit for providing a second access control signal to the authorization unit in response to spatial coordinates of the apparatus.

9. The apparatus of claim 1, wherein the remote unit further comprises:

a signaling device; and

an override device.

10. An apparatus comprising:

a data storage device including a data storage medium and an authorization unit; and

a remote unit controlling the authorization unit to control access to data stored on the data storage medium.

11. The apparatus of claim 10, wherein the remote unit contains a user rights database.

12. A method comprising:

using an authorization unit to control access to data stored on a data storage medium in response to an access control signal received from a remote unit.

13. The method of claim 12, further comprising:

using the authorization unit to encrypt information to be stored on a data storage medium.

14. The method of claim 12, wherein the remote unit includes a private key for use by the authorization unit.

15. The method of claim 14, wherein the authorization unit includes a public key for encrypting information to be stored on the storage medium.

16. The method of claim 12, wherein the remote unit comprises:

a user interface;

a key memory;

a transmitter; and

a processor for controlling the transfer of key data from the key memory to the transmitter in response to the user interface.

17. The method of claim 12, further comprising:

using a second remote unit to provide a second access control signal to the authorization unit in response to an altimeter.

18. The method of claim 12, further comprising:

using a second remote unit to provide a second access control signal to the authorization unit in response to spatial coordinates of the apparatus.

19. The method of claim 12, wherein the remote unit includes a key that is changed on a regular or irregular basis.

20. The method of claim 12, wherein the authorization unit corrupts data stored on the storage medium in response to a distress signal.