Method of protecting data stored in the memory device of a computer system and equipment to carry out this method

• US 6,516,999 B1
• Filed: 07/27/2000
• Issued: 02/11/2003
• Est. Priority Date: 10/14/1998
• Status: Expired due to Fees

• Current Assignee: Solid Access Technologies LLC
• Original Assignee: Solid Access Technologies LLC
• Inventors: Bélono{haeck over (z)}nik, Jaroslav
• Primary Examiner(s): Lee, Michael G.
• Assistant Examiner(s): LEE, SEUNG H
• Application Number:
  US09/581,076
• Time in Patent Office: 929 Days
• Field of Search: 235/379, 235/380, 235/382, 235/451, 235/492
• US Class Current: 235/382
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00

Abstract

A method of protecting data, stored in a memory device of a computer system connected to a SCSI interface, against, unauthorized access whereby access by the computer system to the memory device is either permitted or refused, depending upon the authorization of a request, by an exchange of information between the computer system and the memory device at the SCSI interface. Authorization is by means of identification of an authorized user. During access by the computer system to the memory device, any kind of operation with the memory device can be blocked, or access permission given for memory readout only, or for readout and recording, or only for recording. The equipment for carrying out the method includes a memory device connected by a SCSI bus to a host computer system, while between the memory device and the host computer system there an additional control unit with authorization block is inserted.

Claims

1. A method of protecting data, stored in a memory device of a computer system connected to a SCSI (Small Computer System Interface) interface bus, against unauthorized access, characterized in that:

a control unit having an authorization block is integrated into the SCSI interface bus between the memory device and a SCSI adapter connected to the computer system, said control unit receiving a memory access request control signal from the computer system;

providing an authorization level control signal from said authorization block to said control unit by means of identification of an authorized user;

evaluation said authorization level control signal to screen communication between the computer system and the memory device at the SCSI interface depending upon an authorization level of the memory access request control signal, whereby access by the computer system to the memory device, is either permitted or refused.

2. A device for carrying out the method according to claim 1, comprising:

a memory device (DS) connected to a SCSI bus to a host computer system (US); and

an additional control unit (RJ) having an authorization block (OV) having an authorized user identifier connected thereto integrated into the SCSI bus between the memory device and a SCSI adapter connected to the host computer system.

3. A device according to claim 2, characterized in that the memory device (DS) consists of a hard disk, a disk subsystem, optical disk, tape unit, re-writable compact disk or electronic memory device.

4. A device according to claim 3, characterized in that said additional control unit (RJ) is directly connected to the memory (DS) and is connected at the same time to the SCSI bus.

5. A device according to claim 2, characterized in that the additional control unit (RJ) consists of an electronic control unit, comprising microprocessors or SCSI control units with control software.

6. A device according to claim 5, characterized in that said additional control unit (RJ) is directly connected to the memory (DS) and is connected at the same time to the SCSI bus.

7. A device according to claim 2, characterized in that the authorized user identifier comprises:

a lock with mechanical key with contacts.

8. A device according to claim 7, characterized in that said additional control unit (RJ) is directly connected to the memory (DS) and is connected at the same time to the SCSI bus.

9. A device according to claim 2, characterized in that said additional control unit (RJ) is directly connected to the memory (DS) and is connected at the same time to the SCSI bus.

10. A device according to claim 2, characterized in that a data portion of the SCSI bus is connected directly to the memory device (DS), while a command portion of the SCSI bus is interrupted by said additional control unit (RJ).

11. The device according to claim 2, characterized in that the authorized user identifier comprises a connector with storage memory of the EEPROM, EPROM or ROM type.

12. The device according to claim 2, characterized in that the authorized user identifier comprises a connector for inserting touch-memory.

13. The device according to claim 2, characterized in that the authorized user identifier comprises a chip card or magnetic card scanner.

14. The device according to claim 2, characterized in that the authorized user identifier comprises a user identification scanner.

15. The method as claimed in claim 1 wherein said control unit further performs the step of blocking of any kind of operation with the memory device.

16. The method as claimed in claim 1 wherein said control unit further performs the step of permitting access to the memory device for memory device readout only.

17. The method as claimed in claim 1 wherein said control unit further performs the step of permitting access to the memory device for readout and recording of data in the memory device.

18. The method as claimed in claim 1 wherein said control unit further performs the step of permitting access to the memory device only for recording of data in the memory device.