A PORTABLE DATA STORAGE DEVICE HAVING A SECURE MODE OF OPERATION

• US 20060230203A1
• Filed: 05/30/2006
• Published: 10/12/2006
• Est. Priority Date: 02/21/2000
• Status: Abandoned Application

• Current Assignee: Trek Technology Singapore PTE Limited
• Original Assignee: Trek Technology Singapore PTE Limited
• Inventors: Poo, Teng Pin, Cheng, Chong Seng
• Application Number:
  US11/420,907
• Publication Number:
  US 20060230203A1
• Time in Patent Office: Days
• US Class Current: 710/62
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 3/0601 Interfaces specially adapted for storage systems
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0634 by changing the state or mode of one or more devices
• CPC Class Codes: G06F 3/0664 at device level, e.g. emulation of a storage device or system
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]
• CPC Class Codes: G11C 16/102 External programming circuits, e.g. EPROM programmers; In-circuit programming or reprogramming; EPROM emulators
• CPC Class Codes: G11C 16/22 Safety or protection circuits preventing unauthorised or accidental access to memory cells

Abstract

A portable data storage device (10) includes a universal serial bus (USB) coupling device (1) and an interface device (2) is coupled to the USB coupling device (1). The portable data storage device (10) also includes a memory control device (3) and a non-volatile solid-state memory device (4). The memory control device (3) is coupled between the interface device (2) and the memory device (4) to control the flow of data from the memory device (4) to the USB coupling device (1). An authorization input is received from the user of the portable data storage device, a comparison is made comparing the authorization input from the user of the portable data storage device with authorization data stored on the portable data storage device; and access to requested data is granted or denied depending on whether the authorization input from the user corresponds to the stored authorization data.

Claims

1. A method of restricting access to data on a portable data storage device capable of being coupled to a computer system, the method comprising the steps of:

receiving a portable data storage device that comprises a USB plug capable of being coupled to a USB socket of the computer system, a memory including non-volatile solid-state memory having sufficient capacity to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD, and a memory controller coupled to the memory capable of controlling data flow to and from the memory, wherein access to at least a portion of data on the memory is restricted absent confirmation of a user'"'"'s authorization;

receiving an authorization input from the user of the portable data storage device;

comparing the authorization input from the user of the portable data storage device with authorization data stored on the portable data storage device; and

provided that the authorization input from the user corresponds to the stored authorization data, granting the user of the portable data storage device access to requested data.

2. The method of claim 1, further comprising the step of decrypting the stored authentication data.

3. The method of claim 1, further comprising the step of denying the user of the portable data storage device access to the requested data provided that the authorization input does not correspond to the stored authentication data.

4. A unitary portable data storage device comprising:

universal serial bus (USB) plug integrated into the unitary portable data storage device, without an intervening cable, capable of coupling the unitary portable data storage device directly to a USB socket of a computer;

an interface coupled to the USB plug, the interface allowing the unitary portable data storage device to communicate via the USB protocol;

a non-volatile solid-state memory, the memory having sufficient capacity to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD; and

a memory controller coupled between the interface and the memory to control the flow of data between the memory and the USB plug in a manner to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD and to implement access restriction,

wherein access to at least a portion of the data in the memory is restricted absent confirmation of a user'"'"'s authorization obtained by comparing an authorization input obtained from the user of the portable data storage device with authorization data stored on the portable data storage device.

5. The unitary portable data storage device as recited in claim 4 wherein the memory controller comprises a micro-controller.

6. The unitary portable data storage device as recited in claim 4 wherein the memory comprises a read/write memory.

7. The unitary portable data storage device as recited in claim 4 wherein the memory comprises flash memory.

8. The unitary portable data storage device as recited in claim 4 wherein the unitary portable data storage device is sufficiently compact to be held within a human hand for maximal portability.

9. An integrated portable data storage device comprising:

universal serial bus (USB) plug integral to the integrated portable data storage device, the integrated portable data storage device capable of being directly connected to a USB socket of a computer via the USB plug such that there is an immediate connection between the integrated portable data storage device and the computer without cable interconnection;

an interface coupled to the USB plug, the interface allowing the integrated portable data storage device to communicate via the USB protocol;

non-volatile solid-state memory, the memory having sufficient capacity to enable the integrated portable data storage device to serve as an alternative to a magnetic disk or CD; and

a memory controller coupled to the memory to control the flow of data between the memory and the USB plug in a manner to enable the integrated portable data storage device to serve as an alternative to a magnetic disk or CD and to implement access restriction wherein access to at least a portion of the data in the memory is restricted absent confirmation of a user'"'"'s authorization obtained by comparing an authorization input obtained from the user of the portable data storage device with authorization data stored on the portable data storage device; and

wherein the USB plug, the memory and the memory controller are part of an integrated device with a portion of the USB plug protruding the integrated device to facilitate direct coupling to the USB socket.

10. The integrated portable data storage device as recited in claim 9 wherein the memory controller comprises a micro-controller.

11. The integrated portable data storage device as recited in claim 9 wherein the memory comprises a read/write memory.

12. The integrated portable data storage device as recited in claim 9 wherein the memory comprises flash memory.

13. The integrated portable data storage device as recited in claim 9 wherein the integrated portable data storage device is sufficiently compact to be held within a human hand for maximal portability.

14. A unitary portable data storage device comprising:

universal serial bus (USB) plug integrated into the unitary portable data storage device, without an intervening cable, capable of coupling the unitary portable data storage device directly to a USB socket of a computer;

an interface coupled to the USB plug, the interface allowing the unitary portable data storage device to communicate via the USB protocol;

a non-volatile solid-state memory, the memory having sufficient capacity to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD; and

a memory controller coupled to the memory and responsive to a stored program to cooperatively control the flow of data between the memory and the computer to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD and to implement access restriction,

wherein access to at least a portion of the data in the memory is restricted absent confirmation of a user'"'"'s authorization obtained by comparing an authorization input obtained from the user of the portable data storage device with stored authorization data.

15. The unitary portable data storage device as recited in claim 14 wherein the memory controller comprises a micro-controller.

16. The unitary portable data storage device as recited in claim 14 wherein the memory comprises a read/write memory.

17. The unitary portable data storage device as recited in claim 14 wherein the memory comprises flash memory.

18. The unitary portable data storage device as recited in claim 14 wherein the unitary portable data storage device is sufficiently compact to be held within a human hand for maximal portability.