Wireless encryption key integrated HDD

• US 20080141041A1
• Filed: 12/08/2006
• Published: 06/12/2008
• Est. Priority Date: 12/08/2006
• Status: Abandoned Application

• Current Assignee: Hitachi Global Storage Technologies Netherlands BV (Western Digital Corporation)
• Original Assignee: Hitachi Global Storage Technologies Netherlands BV (Western Digital Corporation)
• Inventors: New, Richard, De Souza, Jorge Campello, Molaro, Donald
• Application Number:
  US11/635,996
• Publication Number:
  US 20080141041A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A wireless encryption key integrated storage system is provided to prevent unauthorized access of data stored on the storage device without secure authentication between the storage device and a key device. In one embodiment, a data storage device comprises a magnetic disk; a head assembly having a read/write head which read and write data from/on the magnetic disk; a wireless transceiver configured to receive and transmit wireless signals from a key device, the wireless signals comprising information used to establish a secure authorization between the data storage device and the key device to access secured content in the magnetic disk; and a processor configured to encrypt/decrypt data transferred between the data storage device and the key device.

Claims

1. A data storage device comprising:

a magnetic disk;

a head assembly having a read/write head which read and write data from/on the magnetic disk;

a wireless transceiver configured to receive and transmit wireless signals from a key device, the wireless signals comprising information used to establish a secure authorization between the data storage device and the key device to access secured content in the magnetic disk; and

a processor configured to encrypt/decrypt data transferred between the data storage device and the key device.

2. The data storage device of claim 1 wherein the controller comprises:

a controller configured to control the head assembly to read/write data to/from the magnetic disk;

a hard disk drive control configured to transfer data between an external host and the magnetic disk generating a position error signal from servo data and transmit positional information about the head assembly to a read/write controller;

a spindle/VCM driver configured to control movement of an actuator arm over the magnetic disk whereby the head assembly is mounted on the actuator arm, and to control movement of the magnetic disk;

a microprocessor configured to interpret commands transmitted from the hard disk drive controller and instruct the hard disk drive controller to perform a read/write operation based on the address specified by a command;

a head IC unit configured to receive and communicate data to and from the head assembly; and

an IC position converter which determines the position of the head assembly.

3. The data storage device of claim 1 wherein the information being transmitted is encrypted by public or private keys.

4. The data storage device of claim 1 wherein the information being transmitted is first encrypted by a private key known to the data storage device, then decrypted by a public key known to the key device corresponding to the private key.

5. The data storage device of claim 1 wherein at least a portion of the information used to establish a secure authorization between the data storage device and the key device is randomly generated.

6. The data storage device of claim 1 wherein the information being transmitted comprises a digital certificate.

7. The data storage device of claim 1 wherein the magnetic disk includes a plurality of sectors, and wherein one or more of the plurality of sectors containing the secured content are encrypted prior to establishing the secure authorization between the data storage device and the key device.

8. The data storage device of claim 1 wherein the magnetic disk includes a plurality of sectors, and wherein after establishing the secure authorization between the data storage device and the key device, at least one of the plurality of sectors containing the secured content is decrypted.

9. A data storage system comprising a key device configured to receive and transmit wireless signals and a data storage device, the data storage device comprising:

a magnetic disk;

a head assembly having a read/write head which read and write data from/on the magnetic disk;

a wireless transceiver configured to receive and transmit wireless signals from a key device, the wireless signals comprising information used to establish a secure authorization between the data storage device and the key device to access secured content in the magnetic disk; and

a processor configured to encrypt/decrypt data transferred between the data storage device and the key device.

10. The data storage system of claim 9 wherein the information being transmitted is encrypted by public or private keys.

11. The data storage system of claim 9 wherein the information being transmitted comprises a digital certificate.

12. The data storage system of claim 9 further comprising a computing device coupled to the data storage device.

13. The data storage system of claim 12 wherein the data storage device is unavailable to an operating system used in the computing device when the secure authorization between the data storage device and the key device cannot be established.

14. The data storage system of claim 12 wherein the data storage device and the key device communicate with each other to establish the secure authorization therebetween independently of an operating system used in the computing device.

15. The data storage system of claim 12 wherein the key device is incorporated into a component of the computing device.

16. The data storage system of claim 15 wherein the component is a computer case or a circuit board of the computing device.

17. A data storage device comprising:

a magnetic disk containing encrypted information;

a head assembly having a read/write head which read and write data from/on the magnetic disk;

a wireless transceiver configured to receive and transmit wireless signals from a key device, the wireless signals comprising information used to establish a secure authorization between the data storage device and the key device to access secured content in the magnetic disk;

a memory including a computer program to encrypt/decrypt data transferred between the data storage device and the key device; and

a processor configured to execute the computer program.

18. The data storage device of claim 17 wherein the computer program comprises:

code for determining if the key device is in range for wireless transmission;

code for receiving a randomly generated message from the key device;

code for creating an encrypted message from the randomly generated message using a private key, the private key being one of a set of paired cryptographic keys;

code for sending the encrypted message to the key device, the key device decrypting the encrypted message received from the data storage device using a public key paired with the private key, and verifying that the decrypted message which is decrypted from the encrypted message received by the key device from the data storage device is identical to the randomly generated message; and

code for, if the decrypted message from the key device is identical to the randomly generated message, beginning decryption of the secured content in the magnetic disk.

19. The data storage device of claim 17 wherein the magnetic disk includes a plurality of sectors, and wherein one or more of the plurality of sectors containing the secured content are encrypted prior to establishing the secure authorization between the data storage device and the key device.

20. The data storage device of claim 17 wherein the magnetic disk includes a plurality of sectors, and wherein after establishing the secure authorization between the data storage device and the key device, at least one of the plurality of sectors containing the secured content is decrypted.