CRYPTOGRAPHIC STORAGE DEVICE CONTROLLER

• US 20150074412A1
• Filed: 09/12/2014
• Published: 03/12/2015
• Est. Priority Date: 09/12/2013
• Status: Active Grant

• Current Assignee: Carl Beame, SI-Key Limited
• Original Assignee: Carl Beame, SI-Key Limited
• Inventors: BEAME, Carl
• Granted Patent: US 9,531,541 B2
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A method of configuring a controller of a portable-computer-readable-medium for performing a cryptographic function, and a portable-computer-readable-medium configured by same, are disclosed. The portable-computer-readable-medium has memory means in which at least first and second data files are stored, each file starting at a respective Logical Block Address (LBA) of the memory means. A first code, for instance a private key, is written in the first file. A password is associated with the second file. The controller of the portable-computer-readable-medium is configured to perform a hash function upon input data to be written to the second file with the first code, write the output hash to at least the second LBA, increment the first code and write the incremented first code to the first LBA.

Claims

1. A method of configuring a controller of a portable-computer-readable-medium for performing a cryptographic function, comprising the steps of

storing at least first and second data files in memory means of the medium, each file starting at a respective Logical Block Address (LBA) of the memory means;

writing a first code in the first file; and

configuring the controller to perform a hash function upon input data to be written to the second file with the first code, write the output hash to at least the second LBA, increment the first code and write the incremented first code to the first LBA.

2. A method according to claim 1, comprising the further step of

storing a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means;

and

further configuring the controller to write the output hash to the third LBA.

3. A method according to claim 2, comprising the further step of wear-levelling the memory means in use.

4. A method according to claim 1, wherein the method comprises the further step of, for any request received by the controller to read the memory means from the first LBA, returning either blank or random data.

5. A method according to claim 1, comprising the further step of configuring the controller to process only a standard read or write request and to block any other medium input/output control (IOCTL) request.

6. A method according to claim 1, comprising the further step of configuring the controller to disable the cryptographic functions of the portable-computer-readable-medium after a pre-determined number of correct or incorrect attempts at preforming the cryptographic function.

7. A method according to claim 1, wherein the first code is a private key and the second code is a password.

8. A method according to claim 1, wherein the portable-computer-readable-medium is selected from the group comprising random access memory devices, non-volatile random access memory devices, flash memory devices, electrically—

erasable programmable read-only memory devices, optical data storage devices, magnetic data storage devices and networked data storage arrays and portions thereof.

9. A portable-computer-readable-medium comprising

memory means for storing data files,

at least one data input/output interface for interfacing the portable-computer-readable-medium with a data processing terminal;

and

a controller, operably connected to the memory means and to the at least one data input/output interface;

wherein the memory means stores at least first and second data files, each file starting at a respective Logical Block Address (LBA) of the memory means, the first file containing a first code; and

wherein the controller comprises hashing means for hashing input data to be written to the second file with the first code, means for incrementing the first code after hashing, and writing means for writing the hash output by the hashing means to at least the second LBA and writing the incremented first code to the first LBA.

10. A portable-computer-readable-medium according to claim 9, wherein the memory means stores a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means;

and

wherein the writing means is further for writing the hash output by the hashing means to at least the third LBA.

11. A portable-computer-readable-medium according to claim 9, wherein the memory means stores a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means;

and

wherein the writing means is further for writing the hash output by the hashing means to at least the third LBA and wherein the controller is adapted to perform a wear-levelling function upon the memory means.

12. A portable-computer-readable-medium according to claim 9, wherein the first code is a private key and the second code is a password.

13. A portable-computer-readable-medium according to claim 9, wherein the portable-computer-readable-medium is selected from the group comprising random access memory devices, non-volatile random access memory devices, flash memory devices, electrically—

erasable programmable read-only memory devices, optical data storage devices, magnetic data storage devices and networked data storage arrays and portions thereof.

14. A portable-computer-readable-medium according to claim 13, wherein the memory means is a NAND memory.

15. A set of instructions recorded on a data carrying medium storing at least first and second data files in memory means of the medium, each file starting at a respective Logical Block Address (LBA) of the memory means, wherein the set of instructions, when processed by a controller of the data carrying medium, configures the controller to

write a first code in the first file;

perform a hash function upon input data to be written to the second file with the first code;

write the output hash to at least the second LBA;

increment the first code; and

write the incremented first code to the first LBA.

16. A set of instructions according to claim 15, wherein the memory means stores a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means, further configuring the controller to write the hash output by the hashing means to at least the third LBA.

17. A set of instructions according to claim 15, wherein the memory means stores a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means, further configuring the controller to write the hash output by the hashing means to at least the third LBA and further configuring the controller to perform a wear-levelling function upon the memory means.

18. A set of instructions according to claim 15, embodied as firmware for the controller of the data carrying medium.