Storage device and method for using a virtual file in a public memory area to access a plurality of protected files in a private memory area

• US 9,092,597 B2
• Filed: 12/09/2009
• Issued: 07/28/2015
• Est. Priority Date: 12/09/2009
• Status: Active Grant

• Current Assignee: Western Digital Israel Limited (Western Digital Corporation)
• Original Assignee: Sandisk Technologies Incorporated (Western Digital Corporation)
• Inventors: Cohen, Ehud, Ittah, Eyal, Grin, Lola, Peltz, Uri, Maor, Irit, Halevi, Yonatan, Shmuel, Avraham
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US12/634,470
• Publication Number:
  US 20110138487A1
• Time in Patent Office: 2,057 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0644 Management of space entities, e.g. partitions, extents, pools
• CPC Class Codes: G06F 3/0676 Magnetic disk device

Abstract

A storage device and method for using a virtual file in a public memory area to access a plurality of protected files in a private memory area are disclosed. In one embodiment, a storage device receives a request from a host for access to a virtual file in the public memory area, wherein the virtual file is associated with a plurality of protected files stored in the private memory area. The storage device responds to the request by selecting and providing the host with access to one of the plurality of protected files stored in the private memory area. The storage device receives an additional request from the host for access to the virtual file and responds to the additional request by selecting and providing the host with access to a different one of the plurality of protected files stored in the private memory area.

Claims

1. A method for using a virtual file in a public memory area to access a plurality of protected files in a private memory area, the method comprising:

performing in a controller of a storage device in communication with a host, wherein the storage device has a public memory area and a private memory area;

receiving a request from the host for access to the virtual file in the public memory area, wherein a database stored in the storage device associates the virtual file with the plurality of protected files stored in the private memory area and specifies an order in which the plurality of protected files are to be provided to the host in response to requests from the host for access to the virtual file;

responding to the request for access to the virtual file by selecting and providing the host with access to one of the plurality of protected files stored in the private memory area according to the order specified in the database; and

receiving an additional request from the host for access to the virtual file, wherein the controller responds to the additional request by selecting and providing the host with access to a different one of the plurality of protected files stored in the private memory area according to the order specified in the database;

wherein the controller, the public memory area, and the private memory area are all local to the storage device; and

wherein the virtual file corresponds to different protected files at different times according to the order specified in the database, wherein each time the host requests access to the virtual file, the controller provides the host with a different one of the plurality of protected files according to the order specified in the database.

2. The method of claim 1, wherein responding to the request and receiving the additional request are performed if the host has been authenticated to the storage device, and wherein the controller responds to the request by providing a dedicated message if the host has not been authenticated to the storage device.

3. The method of claim 1, wherein the size of the virtual file is at least as large as the size of the largest protected file.

4. The method of claim 3 further comprising providing the host with the size of the selected protected file.

5. The method of claim 3, wherein the size of the selected protected file is less than the size of the virtual file, and wherein the method further comprises padding the protected file with data to accommodate the difference in sizes.

6. The method of claim 1, wherein the virtual file is allocated to physical areas in the public storage area.

7. The method of claim 1, wherein the virtual file is not allocated to physical areas in the public storage area.

8. The method of claim 1, wherein the protected file is accessed using a dedicated file system.

9. The method of claim 1, wherein the request from the host comprises a compound command of two or more commands.

10. The method of claim 1 further comprising performing at least one of the following:

modifying a protected file stored in the private memory area by writing modified data to the virtual file; and

adding a new protected file to the private memory area by writing the new protected file to the virtual file.

11. The method of claim 1, wherein the protected file is encrypted.

12. The method of claim 1 further comprising using a counter to protect the virtual file from being copied.

13. The method of claim 1 further comprising using a data rate control mechanism to protect the virtual file from being copied.

14. The method of claim 1 further comprising using a sliding window to protect the virtual file from being copied.

15. A storage device comprising:

a public memory area configured to store a virtual file;

a private memory area configured to store a plurality of protected files and a database that associates the virtual file with the plurality of protected files and specifies an order in which the plurality of protected files are to be provided to a host in communication with the storage device in response to requests from the host for access to the virtual file; and

a controller in communication with the public and private memory areas, wherein the controller is configured to;

receive a request from the host for access to the virtual file in the public memory area, wherein the virtual file is associated with the plurality of protected files stored in the private memory area via the database;

respond to the request for access to the virtual file by selecting and providing the host with access to one of the plurality of protected files stored in the private memory area according to the order specified in the database; and

receive an additional request from the host for access to the virtual file, wherein the controller is configured to respond to the additional request by selecting and providing the host with access to a different one of the plurality of protected files stored in the private memory area according to the order specified in the database;

wherein the controller, the public memory area, and the private memory area are all local to the storage device; and

wherein the virtual file corresponds to different protected files at different times according to the order specified in the database, wherein each time the host requests access to the virtual file, the controller provides the host with a different one of the plurality of protected files according to the order specified in the database.

16. The storage device of claim 15, wherein the controller is operative to respond to the request and receive the additional request if the host has been authenticated to the storage device, and wherein the controller is operative to respond to the request by providing a dedicated message if the host has not been authenticated to the storage device.

17. The storage device of claim 15, wherein the size of the virtual file is at least as large as the size of the largest protected file.

18. The storage device of claim 17, wherein the controller is further operative to provide the host with the size of the selected protected file.

19. The storage device of claim 17, wherein the size of the selected protected file is less than the size of the virtual file, and wherein the controller is further operative to pad the protected file with data to accommodate the difference in sizes.

20. The storage device of claim 15, wherein the virtual file is allocated to physical areas in the public storage area.

21. The storage device of claim 15, wherein the virtual file is not allocated to physical areas in the public storage area.

22. The storage device of claim 15, wherein the protected file is accessed using a dedicated file system.

23. The storage device of claim 15, wherein the request from the host comprises a compound command of two or more commands.

24. The storage device of claim 15, wherein the controller is further operative to perform at least one of the following:

modify a protected file stored in the private memory area by writing modified data to the virtual file; and

add a new protected file to the private memory area by writing the new protected file to the virtual file.

25. The storage device of claim 15, wherein the protected file is encrypted.

26. The storage device of claim 15, wherein the controller is further operative to use a counter to protect the virtual file from being copied.

27. The storage device of claim 15, wherein the controller is further operative to use a data rate control mechanism to protect the virtual file from being copied.

28. The storage device of claim 15, wherein the controller is further operative to use a sliding window to protect the virtual file from being copied.