Storage device and storage method, and information-processing device and information-processing method

• US 20080034223A1
• Filed: 07/06/2007
• Published: 02/07/2008
• Est. Priority Date: 08/02/2006
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Funahashi, Takeshi
• Granted Patent: US 8,239,690 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A storage device that can be attached and/or detached to and/or from an information-processing device is provided. The storage device includes a storage unit including a first area provided to store an encryption key used to encode first information and first authentication information used to perform authentication, and a second area storing second information encoded by the information-processing device by using the encryption key, an authentication unit configured to authenticate a user based on second authentication information generated by the information-processing device based on third information input by the user and the first authentication information, a transmission unit configured to transmit the encryption key to the information-processing device when validity of the user is confirmed through the authentication, and a control unit configured to have control over writing and/or reading the encoded second information into and/or from the second area.

Claims

1. A storage device that can be attached and/or detached to and/or from an information-processing device, the storage device-comprising:

storage means including a first area provided to store an encryption key used to encode first information and first authentication information used to perform authentication, and a second area provided to store second information encoded by the information-processing device by using the encryption key;

authentication means configured to authenticate a user based on second authentication information generated by the information-processing device based on third information input by the user and the first authentication information stored in the first area;

transmission means configured to transmit the encryption key stored in the first area to the information-processing device when validity of the user is confirmed through the authentication; and

control means configured to have control over writing and/or reading the encoded second information into and/or from the second area.

2. The storage device according to claim 1, wherein the second authentication information is a hash value generated by the information-processing device based on the third information input by the user.

3. The storage device according to claim 1, wherein the storage means further includes a third area provided to store fourth information which is not encoded by using the encryption key.

4. The storage device according to claim 1, wherein only a predetermined application program running on an operating system installed in the information-processing device can write and/or read the encryption key and/or the first authentication information into and/or from the first area, and

wherein the encoded second information can be written and/or read into and/or from the second area according to a command issued by the OS.

5. A storage method used for a storage device that can be attached and/or detached to and/or from an information-processing device, the storage device having storage means including a first area provided to store an encryption key used to encode first information and first authentication information used to perform authentication, and a second area provided to store second information encoded by the information-processing device by using the encryption key, the storage method comprising the steps of:

authenticating a user based on second authentication information generated by the information-processing device based on third information input by the user and the first authentication information stored in the first area;

transmitting the encryption key stored in the first area to the information-processing device when validity of the user is confirmed through the user authentication; and

having control over writing and/or reading the encoded second information into and/or from the second area.

6. An information-processing device to which a detachable storage device is attached, the information-processing device comprising:

authentication-information-generation means configured to generate first authentication information used to perform authentication based on first information input by a user; and

encode-processing means configured to encode second information stored in the storage device and/or decode the encoded second information transmitted from the storage device by using an encryption key used to perform information encoding, the encryption key being transmitted from the storage device, when validity of the user is confirmed during the authentication performed by the storage device for the user based on the first authentication information and second authentication information stored in the storage device.

7. The information-processing device according to claim 6, wherein the storage device includes:

a first area provided to store the encryption key and the first authentication information; and

a second area provided to store the encoded second information.

8. The information-processing device according to claim 7, wherein a predetermined application program running on an operating system writes and/or reads the encryption key and/or the first authentication information into and/or from the first area, and

wherein the encoded second information is written and/or read into and/or from the second area according to a command issued from the OS.

9. An information-processing method used for an information-processing device to which a detachable storage device is attached, the information-processing method comprising the steps of:

generating first authentication information used to perform authentication based on first information input by a user; and

encoding second information stored in the storage device and/or decoding the encoded second information transmitted from the storage device by using an encryption key used to perform information encoding, the encryption key being transmitted from the storage device, when validity of the user is confirmed during the authentication performed by the storage device for the user based on the first authentication information and second authentication information stored in the storage device.

10. A storage device that can be attached and/or detached to and/or from an information-processing device, the storage device comprising:

a storage unit including a first area provided to store an encryption key used to encode first information and first authentication information used to perform authentication, and a second area provided to store second information encoded by the information-processing device by using the encryption key;

an authentication unit configured to authenticate a user based on second authentication information generated by the information-processing device based on third information input by the user and the first authentication information stored in the first area;

a transmission unit configured to transmit the encryption key stored in the first area to the information-processing device when validity of the user is confirmed through the authentication; and

a control unit configured to have control over writing and/or reading the encoded second information into and/or from the second area.

11. An information-processing device to which a detachable storage device is attached, the information-processing device comprising:

an authentication-information-generation unit configured to generate first authentication information used to perform authentication based on first information input by a user; and

an encode-processing unit configured to encode second information stored in the storage device and/or decode the encoded second information transmitted from the storage device by using an encryption key used to perform information encoding, the encryption key being transmitted from the storage device, when validity of the user is confirmed during the authentication performed by the storage device for the user based on the first authentication information and second authentication information stored in the storage device.