Secure disk drive comprising a secure drive key and a drive ID for implementing secure communication over a public network

• US 7,215,771 B1
• Filed: 06/30/2000
• Issued: 05/08/2007
• Est. Priority Date: 06/30/2000
• Status: Expired due to Term

• Current Assignee: Western Digital Technologies Incorporated (Western Digital Corporation)
• Original Assignee: Western Digital Ventures Incorporated (Western Digital Corporation)
• Inventors: Hamlin, Christopher L.
• Primary Examiner(s): Moazzami, Nasser
• Assistant Examiner(s): COLIN, CARL G
• Application Number:
  US09/608,103
• Time in Patent Office: 2,503 Days
• Field of Search: 713/201, 713/155, 713/200, 713/153, 713/176, 713/189, 380/4, 380/44, 380/285, 380/283, 380/264
• US Class Current: 380/44
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A secure disk drive is disclosed comprising a disk for storing data, and an input for receiving an encrypted message from a client disk drive, the encrypted message comprising ciphertext data and a client drive ID identifying the client disk drive. The secure disk drive comprises a secure drive key and an internal drive ID. A key generator within the secure disk drive generates a client drive key based on the client drive ID and the secure drive key, and an internal drive key based on the internal drive ID and the secure drive key. The secure disk drive further comprises an authenticator for verifying the authenticity of the encrypted message and generating an enable signal, the authenticator is responsive to the encrypted message and the client drive key. The secure disk drive further comprises a data processor comprising a message input for receiving the encrypted message from the client disk drive, and a data output for outputting the ciphertext data to be written to the disk. The data processor further comprises an enable input for receiving the enable signal for enabling the data processor, and a key input for receiving the internal drive key, the internal drive key for use in generating a message authentication code. The data processor outputs reply data comprising the message authentication code. The secure disk drive outputs a reply to the client disk drive, the reply comprising the reply data and the internal drive ID.

Claims

1. A secure disk drive comprising:

(a) a disk for storing data;

(b) an input for receiving an encrypted message from a client disk drive, the encrypted message comprising ciphertext data and a client drive ID identifying the client disk drive;

(c) a secure drive key;

(d) an internal drive ID;

(e) a key generator for generating a client drive key based on the client drive ID and the secure drive key, and an internal drive key based on the internal drive ID and the secure drive key;

(f) an authenticator for verifying the authenticity of the encrypted message and generating an enable signal, the authenticator responsive to the encrypted message and the client drive key;

(g) a data processor comprising;

a message input for receiving the encrypted message from the client disk drive;

a data output for outputting the ciphertext data to be written to the disk;

an enable input for receiving the enable signal for enabling the data processor;

a key input for receiving the internal drive key, the internal drive key for use in generating a message authentication code; and

a reply output for outputting reply data, the reply data comprising the message authentication code; and

(h) an output for outputting a reply to the client disk drive, the reply comprising the reply data and the internal drive ID.

2. The secure disk drive of claim 1, wherein the secure drive key is immutable.

3. The secure disk drive of claim 1, wherein the secure drive key is mutable.

4. The secure disk drive of claim 1, wherein the authenticator comprises a means for verifying the access rights of the client drive ID.

5. The secure disk drive of claim 1, wherein the secure drive key comprises tamper resistant circuitry.

6. The secure disk drive of claim 1, wherein the key generator comprises tamper resistant circuitry.

7. The secure disk drive as recited in claim 1, wherein the authenticator comprises tamper resistant circuitry.

8. The secure disk drive as recited in claim 1, wherein the data processor further comprises cryptographic facilities.

9. A secure disk drive comprising:

(a) a disk for storing data;

(b) an input for receiving an encrypted message from a client disk drive, the encrypted message comprising ciphertext data and a client drive ID identifying the client disk drive;

(c) a secure drive key;

(d) an internal drive ID;

(e) a key generator for generating a client drive key based on the client drive ID and the secure drive key, and an internal drive key based on the internal drive ID and the secure drive key;

(f) an authenticator for verifying the authenticity of the encrypted message and generating an enable signal, the authenticator responsive to the encrypted message and the client drive key;

(g) a data processor comprising;

a message input for receiving the encrypted message from the client secure disk drive;

a data input for receiving ciphertext data read from the disk;

an enable input for receiving the enable signal for enabling the data processor;

a key input for receiving the internal drive key, the internal drive key for use in generating a message authentication code; and

a reply output for outputting reply data, the reply data comprising the ciphertext data read from the disk and the message authentication code; and

(h) an output for outputting a reply to the client disk drive, the reply comprising the reply data and the internal drive ID.

10. The secure disk drive of claim 9, wherein the secure drive key is immutable.

11. The secure disk drive of claim 9, wherein the secure drive key is mutable.

12. The secure disk drive of claim 9, wherein the authenticator comprises a means for verifying the access rights of the client drive ID.

13. The secure disk drive of claim 9, wherein the secure drive key comprises tamper resistant circuitry.

14. The secure disk drive of claim 9, wherein the key generator comprises tamper resistant circuitry.

15. The secure disk drive as recited in claim 9, wherein the authenticator comprises tamper resistant circuitry.

16. The secure disk drive as recited in claim 9, wherein the data processor further comprises cryptographic facilities.