Method and apparatus for retrieving secure information from mass storage media

• US 5,394,469 A
• Filed: 02/18/1994
• Issued: 02/28/1995
• Est. Priority Date: 02/18/1994
• Status: Expired due to Term

• Current Assignee: Harmony Logic Systems LLC (Intellectual Ventures LLC)
• Original Assignee: Infosafe Systems Incorporated
• Inventors: Nagel, Robert, Lipscomb, Thomas H.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/198,733
• Time in Patent Office: 375 Days
• Field of Search: 380/4, 380/9, 380/23, 380/24, 380/25, 380/49, 380/50, 380/29
• US Class Current: 705/53
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress

Abstract

A personal computer or "host computer" and a Mass storage device are arranged on an SCSI bus. A "decryption controller", in a separate enclosure outside of the host computer, is also arranged on the SCSI bus. This controller is addressable by the host computer as if it were the mass storage device. Upon receipt of an information request, the decryption controller initiates a request to the mass storage device for the desired information, retrieves this information, decrypts it (if it is encrypted) and then passes it to the host computer. The decryption controller is thus "transparent" to the host computer.

Claims

1. Apparatus for retrieving information packets from a mass storage device, at least some of which information packets are stored in said mass storage device in encrypted form, said apparatus comprising, in combination:

(a) a digital bus that transmits address information, control information and data from a call initiating unit, connected to said bus, to one or more call receiving units, connected to said bus, wherein each unit connected to said bus has an associated bus address;

(b) a host computer connected to said bus and having a first address;

(c) a mass storage device connected to said bus and having a second address; and

(d) a decryption controller connected to said bus and having a third address, said decryption controller including;

(1) a control unit for controlling the operation of said decryption controller;

(2) a memory; and

(3) means for decrypting encrypted information;

wherein the host computer has stored therein said third address as the address of said mass storage device and sends information requests via said bus to said decryption controller in lieu of said mass storage device; and

wherein said decryption controller by means of said control unit receives information requests from said host computer and executes said information requests by sending information requests via said bus to said mass storage device, storing in said memory information packets received from said mass storage device in response to said information requests, decrypting encrypted portions of said information packets, if any, by said decryption means and transmitting said information packets, in decrypted form, to said host computer.

2. The apparatus defined in claim 1, wherein the digital bus is a small computer system interface bus.

3. The apparatus defined in claim 1, wherein said decryption controller further comprises a financial account register, wherein said decryption controller by means of said control unit debits the contents of said register when an information packet is decrypted, and wherein said decryption controller further decrypts encrypted portions of said information packets only when said financial account has a positive balance.