Portable data storage device having a secure mode of operation

• US 6,880,054 B2
• Filed: 03/09/2001
• Issued: 04/12/2005
• Est. Priority Date: 02/21/2000
• Status: Expired due to Term

• Current Assignee: Trek Technology Singapore PTE Limited
• Original Assignee: Trek Technology Singapore PTE Limited
• Inventors: Cheng, Chong Seng, Poo, Teng Pin
• Primary Examiner(s): Padmanabhan, Mano
• Assistant Examiner(s): SONG, HUA JASMINE
• Application Number:
  US09/803,157
• Publication Number:
  US 20020010827A1
• Time in Patent Office: 1,495 Days
• Field of Search: 711/103, 711/164, 711/163, 707/9, 713/200, 713/202, 713/1, 713/2, 713/201
• US Class Current: 711/164
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 3/0601 Interfaces specially adapted for storage systems
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0634 by changing the state or mode of one or more devices
• CPC Class Codes: G06F 3/0664 at device level, e.g. emulation of a storage device or system
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]
• CPC Class Codes: G11C 16/102 External programming circuits, e.g. EPROM programmers; In-circuit programming or reprogramming; EPROM emulators
• CPC Class Codes: G11C 16/22 Safety or protection circuits preventing unauthorised or accidental access to memory cells

Abstract

A portable data storage device (10) includes a universal serial bus (USB) coupling device (1) and an interface device (2) is coupled to the USB coupling device (1). The portable data storage device (10) also includes a memory control device (3) and a non-volatile solid-state memory device (4). The memory control device (3) is coupled between the interface device (2) and the memory device (4) to control the flow of data from the memory device (4) to the USB coupling device (1).

Claims

1. A method of preparing a portable data storage device having a secure operation mode for use as a software authentication device, the method comprising the steps of:

activating the secure operation mode of the portable data storage device;

communicatively coupling the portable data storage device to a data bus of a computer system via a universal serial bus (USB) port or a IEEE 1394 (Firewire) port;

running a set-up program installed on the computer system to initiate a password set-up procedure;

responsive to a request for password entry presented by the password set-up procedure, entering a unique password corresponding to a specific copy of an end-user software package that is to be supplied with the portable data storage device;

encrypting the unique password; and

storing the encrypted unique password in the portable data storage device;

wherein an end-user can subsequently use the portable data storage device having the encrypted unique password stored therein to authenticate the specific copy of the end-user software package.

2. A method of implementing access security in a portable data storage device that can be communicatively coupled to a computer system via a universal serial bus (USB) port or a IEEE 1394 (Firewire) port, the method comprising the steps of:

activating a secure operation mode of the portable data storage device;

generating a zone selection request upon successful coupling of the portable data storage device to the computer system, the portable data storage device having a memory divided into a plurality of zones, each of which has a zone-specific validation key stored in the memory;

receiving a zone selection entered by a user in response to the zone selection request, the zone selection being indicative of one of the plurality of zones of the memory in the portable data storage device which the user requests to access;

responsive to a request to access a selected zone as indicated by the zone selection, prompting the user for an access key;

decrypting the zone-specific validation key of the selected zone;

comparing the access key entered by the user with the decrypted zone-specific validation key of the selected zone; and

provided that the access key matches the decrypted zone-specific validation key of the selected zone, granting the user access to the selected zone.

3. A method of restricting access to data in a portable data storage device capable of being coupled to a computer system, the method comprising the steps of:

receiving a portable data storage device that comprises a USB plug capable of being coupled to a USB socket of the computer system, a memory device including non-volatile solid-state memory, and a memory control device coupled to the memory device capable of controlling data flow to and from the memory device, wherein access to at least a portion of data in the memory device is restricted absent password authentication;

generating a prompt for password entry upon receipt of the portable data storage device;

receiving a user-supplied password from a user of the portable data storage device;

comparing the user-supplied password from the user of the portable data storage device with a stored password in the portable data storage device; and

provided that the user-supplied password corresponds to the stored password, granting the user of the portable data storage device access to requested data.

4. The method as recited in claim 3 further comprising the step of decrypting the stored password.

5. The method as recited in claim 3 further comprising the step of denying the user of the portable data storage device access to the requested data provided that the user-supplied password does not correspond to the stored password.