Abstract: A storage device comprises a storage device controller, a storage space, and a storage interface coupled to at least one computer system. The storage space is partitioned into a single or a plurality of regions, at least one of which is configurable to be associated with a protected access mode (read and/or write protect mode) through a configuration program (preferably password-protected). Whenever the storage device receives a data access request from a computer system, the storage device controller rejects the request if it determines that a portion or the entirety of a logical address range of the requested data block locates in a region associated with a protected access mode prohibiting the request. A region associated with a read-and-write-protect mode is a data safe box, wherein confidential and/or private and/or valuable data can be stored and protected against any accidental or malicious disclosure or tampering by a malicious program or an intruder.