Cryptographic storage device controller

• US 9,531,541 B2
• Filed: 09/12/2014
• Issued: 12/27/2016
• Est. Priority Date: 09/12/2013
• Status: Active Grant

• Current Assignee: Carl Beame, SI-Key Limited
• Original Assignee: Carl Beame
• Inventors: Beame, Carl
• Primary Examiner(s): HENDERSON, ESTHER BENOIT
• Application Number:
  US14/484,648
• Publication Number:
  US 20150074412A1
• Time in Patent Office: 837 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A method of configuring a controller of a portable-computer-readable-medium for performing a cryptographic function, and a portable-computer-readable-medium configured by same, are disclosed. The portable-computer-readable-medium has memory means in which at least first and second data files are stored, each file starting at a respective Logical Block Address (LBA) of the memory means. A first code, for instance a private key, is written in the first file. A password is associated with the second file. The controller of the portable-computer-readable-medium is configured to perform a hash function upon input data to be written to the second file with the first code, write the output hash to at least the second LBA, increment the first code and write the incremented first code to the first LBA.

Claims

1. A method of configuring a controller of a portable-computer-readable-medium for performing a cryptographic function, comprising the steps of

storing at least first and second data files in memory means of the medium, each file starting at a respective Logical Block Address (LBA) of the memory means, as a first LBA and a second LBA respectively;

writing a first code in the first data file and writing a second code in the second data file; and

configuring the controller to perform a hash function upon input data to be written to the second data file with the first code, write an output hash to at least the second LBA, increment the first code and write the incremented first code to the first LBA.

2. A method according to claim 1, comprising the further step of

storing a third data file in the memory means, the third data file starting at a respective Logical block (LBA) address of the memory means as a third LBA;

and

further configuring the controller to write the output hash to the third LBA.

3. A method according to claim 2, comprising the further step of wear-levelling the memory means in use.

4. A method according to claim 1, wherein the method comprises a further step of, for any request received by the controller to read the memory means from the first LBA, returning either blank or random data.

5. A method according to claim 1, comprising a further step of configuring the controller to process only a standard read or write request and to block any other medium input/output control (IOCTL) request.

6. A method according to claim 1, comprising a further step of configuring the controller to disable the cryptographic functions of the portable-computer-readable-medium after a pre-determined number of correct or incorrect attempts at preforming the cryptographic function.

7. A method according to claim 1, wherein the first code is a private key and the second code is a password.

8. A method according to claim 1, wherein the portable-computer-readable-medium is selected from a group comprising random access memory devices, non-volatile random access memory devices, flash memory devices, electrically-erasable programmable read-only memory devices, optical data storage devices, magnetic data storage devices and networked data storage arrays and portions thereof.

9. A non-transitory portable-computer-readable-medium comprising memory means for storing data files,

at least one data input/output interface for interfacing the portable-computer-readable-medium with a data processing terminal;

and

a controller, operably connected to the memory means and to the at least one data input/output interface;

wherein the memory means stores at least first and second data files, each file starting at a respective Logical Block Address (LBA) of the memory means as a first LBA and a second LBA respectively, wherein the first data file includes a first code and the second data file includes a second code; and

wherein the controller comprises hashing means for hashing input data to be written to the second file with the first code, means for incrementing the first code after hashing, and writing means for writing a hash output by the hashing means to at least the second LBA and writing the incremented first code to the first LBA.

10. A non-transitory portable-computer-readable-medium according to claim 9, wherein the memory means stores a third data file in the memory means, the third data file starting at a respective Logical block (LBA) address of the memory means as a third LBA;

and

wherein the writing means is further for writing the hash output by the hashing means to at least the third LBA.

11. A non-transitory portable-computer-readable-medium according to claim 9, wherein the memory means stores a third data file in the memory means, the third data file starting at a respective Logical block (LBA) address of the memory means as a third LBA;

and

wherein the writing means is further for writing the hash output by the hashing means to at least the third LBA and wherein the controller is adapted to perform a wear-levelling function upon the memory means.

12. A non-transitory portable-computer-readable-medium according to claim 9, wherein the first code is a private key and the second code is a password.

13. A non-transitory portable-computer-readable-medium according to claim 9, wherein the portable-computer-readable-medium is selected from a group comprising random access memory devices, non-volatile random access memory devices, flash memory devices, electrically-erasable programmable read-only memory devices, optical data storage devices, magnetic data storage devices and networked data storage arrays and portions thereof.

14. A non-transitory portable-computer-readable-medium according to claim 13, wherein the memory means is a NAND memory.

15. A non-transitory portable-computer-readable-medium comprising a set of instructions recorded on a data carrying medium storing at least first and second data files in memory means of the medium, each file starting at a respective Logical Block Address (LBA) of the memory means as a first LBA and a second LBA respectively, wherein the set of instructions, when processed by a controller of the data carrying medium, configures the controller to

write a first code in the first file;

perform a hash function upon input data to be written to the second file with the first code;

write an output hash to at least the second LBA;

increment the first code; and

write the incremented first code to the first LBA.

16. A non-transitory portable-computer-readable-medium comprising a set of instructions according to claim 15, wherein the memory means stores a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means as a third LBA, further configuring the controller to write the hash output by the hashing means to at least the third LBA.

17. A non-transitory portable-computer-readable-medium comprising a set of instructions according to claim 15, wherein the memory means stores a third data file in the memory means, the third file starting at a respective Logical block (LBA) address of the memory means as a third LBA, further configuring the controller to write the hash output by the hashing means to at least the third LBA and further configuring the controller to perform a wear-levelling function upon the memory means.

18. A non-transitory portable-computer-readable-medium comprising a set of instructions according to claim 15, wherein the set of instructions are embodied as firmware for the controller of the data carrying medium.