RECORDING DEVICE, CONTROLLER, CONTROL METHOD OF RECORDING DEVICE

• US 20120020474A1
• Filed: 05/13/2011
• Published: 01/26/2012
• Est. Priority Date: 07/20/2010
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kudoh, Yoshiyuki, Yamakawa, Teruji
• Application Number:
  US13/107,846
• Publication Number:
  US 20120020474A1
• Time in Patent Office: Days
• US Class Current: 380/28
• CPC Class Codes: G11B 20/00282 the key being stored in the content area, e.g. program area, data area or user area key stored in a management area G11B20/00297
• CPC Class Codes: G11B 20/00478 wherein contents are decrypted and re-encrypted with a different key when being copied from/to a record carrier
• CPC Class Codes: G11B 20/00492 wherein content or user data is encrypted
• CPC Class Codes: G11B 2220/2516 Hard disks
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

According to some embodiments, there is provided a recording device. The recording device includes: a recording medium having a plurality of sectors; a first writing module configured to write, on a first sector of the plurality of sectors, a first data encrypted using a first encryption key and first encryption key information indicative of the first encryption key; and a re-encrypting module configured to: read the first data from the recording medium; decrypt the first data using the first encryption key to generate decrypted first data; encrypt the decrypted first data using a second encryption key to generate encrypted second data; and write, on the first sector, the encrypted second data and second encryption key information indicative of the second encryption key.

Claims

1. A recording device comprising:

a recording medium having a plurality of sectors;

a first writing module configured to write, on a first sector of the plurality of sectors, a first data encrypted using a first encryption key and first encryption key information indicative of the first encryption key; and

a re-encrypting module configured to;

read the first data from the recording medium;

decrypt the first data using the first encryption key to generate decrypted first data;

encrypt the decrypted first data using a second encryption key to generate encrypted second data; and

write, on the first sector, the encrypted second data and second encryption key information indicative of the second encryption key.

2. The device of claim 1, further comprising:

a receiving module configured to receive from a host device a read request to read data recorded in the recording medium;

a reading module configured to read a third data from a sector specified by the read request, the third data being encrypted using one of the first and second encryption keys and a corresponding one of the first and second encryption key information;

a decrypting module configured to decrypt the third data using the corresponding encryption key information to generate decrypted fourth data; and

an output module configured to output the decrypted fourth data to the host device.

3. The device of claim 1, further comprising:

a receiving module configured to receive data from a host device;

an encrypting module configured to encrypt the received data using the second encryption key; and

a second writing module configured to write, on at least one sector of the plurality of sectors, the received data encrypted using the second encryption key and the second encryption key information.

4. The device of claim 1, wherein the each of the plurality of sectors of the recording medium comprises an unencrypted data storage area and an encrypted data storage area, and wherein encryption key information is recorded in the unencrypted data storage area.

5. The device of claim 1, wherein the plurality of sectors comprise N sectors and the first encryption key is recorded on a prescribed number E of the plurality of sectors, and wherein E<

N.

6. A controller comprising:

a first controller configured to write, on a first sector of a recording medium, a first data encrypted using a first encryption key and first encryption key information indicative of the first encryption key; and

a second controller configured to;

read the first data from the recording medium;

decrypt the first data using the first encryption key to generate decrypted first data;

encrypt the decrypted first data using a second encryption key to generate encrypted second data; and

write, on the first sector, the encrypted second data and second encryption key information indicative of the second encryption key.

7. The controller of claim 6, further comprising:

a receiving module configured to receive from a host device a read request to read data recorded in the recording medium;

a reading module configured to read a third data, from a sector specified by the read request, the third data being encrypted using one of the first and second encryption keys and a corresponding one of the first and second encryption key information;

a decrypting module configured to decrypt the encrypted third data using the corresponding encryption key information to generate decrypted fourth data; and

an output module configured to output the decrypted fourth data to the host device.

8. The controller of claim 6, further comprising:

a receiving module configured to receive data from a host device;

an encrypting module configured to encrypt the received data using the second encryption key; and

a second writing module configured to write, on at least one sector of the plurality of sectors, the received data encrypted using the second encryption key and the second encryption key information.

9. The controller of claim 6, wherein the each of the plurality of sectors of the recording medium comprises an unencrypted data storage area and an encrypted data storage area, and wherein encryption key information is recorded in the unencrypted data storage area.

10. The controller of claim 6, wherein the plurality of sectors comprise N sectors and the first encryption key is recorded on a prescribed number E of the plurality of sectors, and wherein E<

N.

11. A method of controlling a recording device, the recording device comprising a recording medium having a first sector, the method comprising:

writing, on the first sector, a first data encrypted using a first encryption key and first encryption key information indicative of the first encryption key;

reading the first data from the recording medium;

decrypting the first data using the first encryption key to generate decrypted first data;

encrypting the decrypted first data using a second encryption key to generate encrypted second data; and

writing, on the first sector, the encrypted second data and second encryption key information indicative of the second encryption key.

12. The method of claim 11, further comprising:

receiving from a host device an access request;

determining if the access request is a read request;

reading encrypted data and encryption key information from the recording medium when the access request is a read request;

selecting one of the first encryption key or the second encryption key based on the encryption key information;

decrypting the encrypted data based on the selected encryption key; and

outputting the decrypted data to the host device.

13. The method of claim 11, further comprising:

receiving from a host device an access request;

determining if the access request is a write request with write data;

selecting the second encryption key;

encrypting received write data using the second encryption key; and

writing the received write data encrypted using the second encryption key and the second encryption key information to the recording medium.

14. The method of claim 11, wherein the recording medium comprises a plurality of sectors having an unencrypted data storage area and an encrypted data storage area, and wherein encryption key information is recorded in the unencrypted data storage area.

15. The controller of claim 11, wherein the recording medium comprises a plurality of sectors N, wherein the first encryption key is recorded on a prescribed number E of the plurality of sectors, and wherein E<

N.