Abstract: A system and method for simplifying the testing and manufacturing process of multi-board solid-state storage systems. The system is constructed by placing secondary non-volatile memory components onto every board in multi-board system that carries primary solid-state components. This allows separate or independent testing of the boards, and final construction of the solid-state system by simply connecting these boards, without the need to either test the completely constructed system or to transfer geometry, faulty location and auxiliary records if the boards have been tested independently. The best mode of the invention is a solid-state storage system, wherein system data is stored on multiple boards, so that each board is a separate entity and can be attached, removed or replaced without additional steps for transferring the system information.

Abstract: Data stored in a portable storage device are encrypted, for example by a processor of the portable storage device itself, using a backup key and stored in a backup medium. The backup key is protected by being stored in a backup key storage medium, such as an internet server, a pocketable medium or a trusted computer, preferably after being encrypted using a password. As needed, the backup key is retrieved and used to decrypt the data from the backup medium. The decrypted data are restored to the original portable storage device or to a different portable storage device.

Abstract: An integrated storage device, for storing a data package received wirelessly from a remote base station, includes a secondary non-volatile storage device, an antenna, a primary non-volatile storage medium, and a processor. The antenna is configured to receive the data package wirelessly from the remote base station. The antenna is also configured to receive electrical energy from the remote base station in order to power the secondary non-volatile storage device, such that, the secondary non-volatile storage device is accessible in order to store the data package. The primary non-volatile storage medium is only accessible when electrically connected to a power supply. The secondary nonvolatile storage device and the primary non-volatile storage medium are permanently operationally connected.

Abstract: A memory device includes an executable flash memory partition and a non-executable partition, both partitions being fabricated on a common die. Preferably, both partitions are fabricated using the same flash memory technology. Most preferably, the flash cells of both partitions have insulating floating gates.

Abstract: A microelectronic apparatus and method for generating random binary words including at least one clocked pseudorandom binary number sequence generator normally operative to generate a cyclic output sequence of binary numbers, each number including a string of binary symbols, the cyclic output sequence including a basic sequence which is generated repeatedly, at least one bit stream generator generating a clocked bit stream including a stream of binary symbols of a first type occasionally interrupted by a binary symbol of a second type, wherein a first varying time interval between the occasional interruptions is intractably correlated to the output sequence of the number sequence generator, wherein each occurrence of an interruption of the stream of binary symbols of the first type by a binary symbol of the second type causes a pseudorandom modification of the cyclic output sequence of the number sequence generator and a sampling device operative to sample the cyclic output sequence of binary numbers thereby

Abstract: A peripheral device of a host computer includes a microcontroller and two virtual devices. The first virtual device passes, to the microcontroller, commands of a first command set from any user of the host computer and preferably also commands of a second command set from only privileged users of the host computer. The second virtual device passes, to the microcontroller, commands of the second set from any user of the host computer. In one physical implementation of the invention, the two virtual devices are implemented as separate physical devices, and the second device is connected to an interface to the host computer only if the user is not privileged. In another physical implementation of the invention, the two virtual devices are implemented in a common physical device, and a sector of a memory of the peripheral device is reserved for handling commands of the second set from non-privileged users.

Abstract: A method of managing a data storage medium. One portion of the medium is reserved for storing data files and directories. Another, separate portion of the medium is reserved for storing allocation information related to the data in the first portion. Upon beginning a change of one of the data files or directories in the first portion, that data file or directory is flagged robustly until the change is completed. As needed, for example when the medium is mounted on a host system, the incomplete changes to the flagged data files and directories are undone or completed.

Abstract: A data storage device includes one or more non-volatile, blockwise erasable data storage media and a mechanism for sanitizing the media in response to a single external stimulus or in response to a predetermined physical or logical condition. Optionally, only part of the media is sanitized, at a granularity finer than the blocks of the medium. Setting a flag in an auxiliary nonvolatile memory enables an interrupted sanitize to be detected and restarted. Optionally, a “death certificate” verifying the sanitizing is issued. Preferably, the media are configured in a manner that allows atomic operations of the sanitizing to be effected in parallel.

Abstract: A driver for a data storage device includes an access command and a verification command. The access command initiates an access (write, erase or read) of the data storage device while allowing a calling application to continue running without having to wait for the completion of the access. The verification command queries a preceding access. If the query indicates failure of the preceding access, the verification command repeats the preceding access until the preceding access succeeds. The verification command is called by the access command before the access command initiates a new access. The verification command also is called by an application following a sequence of related access command calls. A write access command saves the data to be written in a memory separate from the data storage device, in case the verification command needs that data to repeat a failed write.

Abstract: A system and method for enabling flash memory systems to support flash devices with pages that are larger than operating system data sector sizes, while not violating the device's specifications, and also optimizing performance. According to the present invention, the writing logic of a flash memory system must take into account the PPP limitations and page size of the device during sector write operations. The PPP influences the decision when to simply write the new data, and when to allocate a new page and copy previously existing data to the new page. According to the present invention, when a page contains more than one sector, the software makes the standard translation into physical address, but after finding the address, it examines the page containing that address, and counts the number of other sectors within the same page already containing data.

Abstract: A data storage device that can be reversibly associated with one or more of a plurality of hosts. A “trusted” host on which the device is mounted is allowed access to a secure data area of the device automatically, without the user having to enter a password. Ways in which a host is designated as “trusted” include storing the host's ID in a trusted host list of the device, storing a representation of the host's ID that was encrypted using a trust key of the device in a cookie in the host, or storing a storage password of the device in a password list of the host. Alternatively, an untrusted host is allowed access to the secure data area if a user enters a correct user password.

Abstract: The present invention relates to an architectural development of a monolithic integrated circuit with dual public key cryptographic protected central processing units in a computing device, with large external non-volatile reprogrammable memory enabled to perform cryptographically controlled transactions for identification of persons, computers, and or mobile devices, for controlling access to physical and computational devices, for multivendor monetary transactions, and to serve as a safe depository of data, especially useful for encapsulating applications, programmed and updated by varied entitled programmers such that one or many vendors' applications are mutually exclusive, and virtually unable to corrupt, infringe, change or affect other vendor applications.

Abstract: This invention discloses apparatus and methods for accelerating processing, loading and unloading of data, from and to a plurality of memory addresses in a CPU having an accumulator, and to a memory-mapped coprocessing device for continuous integer computations.

Abstract: A portable storage device including a microprocessor and a secure user data area, the microprocessor operable to perform on-the-fly encryption/decryption of secure data stored on the storage device under a user password, the microprocessor also operable to exclude access to the secure user data area unless the user password is provided.

Abstract: An appliance that includes a host device and a memory unit with a primary memory, and a method of operating the appliance. According to one aspect of the appliance, the primary memory is nonvolatile and the memory unit also includes a volatile memory a power sensor and a controller. When the power sensor detects interruption of power to the memory unit, the controller copies data selectively from the volatile memory to the primary memory. Power for this copying is provided by a secondary power source such as a battery or a capacitor. According to another aspect of the appliance, the appliance includes primary and secondary power sources, and the memory unit also includes a charge pump whose functions include both boosting power from the primary source for the primary memory and charging the secondary source.

Abstract: An improved method for affecting wear leveling in all units of a flash media, with a considerable decrease in usage of system resources. This is enabled by providing an algorithm that ensures that static areas do not remain static, and that the static data within them is guaranteed to move to other physical locations, such that wear leveling is achieved for all units. The method comprises: launching the wear leveling method once per some large number of write or erase operations done by the Flash data manager; selecting a unit in the media in a manner that successive selections will ultimately select all units; and moving the selected unit data to another free unit, and erasing the selected unit.

Abstract: A data storage device includes a data storage medium, for example one or more flash memory modules, and a direct interface, to the data storage medium, that supports a file system protocol. Preferably, the data storable device also includes a physical communication interface such as a USB interface or a wireless interface, a user interface and a power source. The scope of the invention also includes appliances that include such data storage devices.

Abstract: A system and method for increasing the performance of a flash-based storage system, using specialized flash memory controller(s). Several methods of performance improvement are suggested such as adding DMA capability to flash memory controller to reduce the data transfer time; connecting flash chips to a multitude of flash memory controllers, which allow continuation of the data transfer to the system, even after the page programming operation has started; and connecting flash chips to a multitude of DMA-capable flash memory controllers to allow data transfer directly from one flash chip to another. In addition, a multi-controller design is suggested, which efficiently combines these performance-improving methods. In its best mode of operation, the present invention is a Flash-based storage system with several flash controllers or a multi-controller with DMA interface, organized in a way that reduces the page programming, page fetch and page copy time.

Abstract: A device, a method and a system for reading/writing data, preferably of a particular type, from a first dedicated port of a NVM storage, while other data is reading/written to at least a second general port of the NVM storage. Preferably, while data is being continually read/written through the dedicated port of the NVM storage, the logic processor which controls the NVM storage optionally “sleeps”, or reverts to a lower power consumption mode. The NVM storage of the present invention may optionally feature a plurality of ports, as long as at least one dedicated port for reading/writing data, preferably of a particular type, and at least one general port for reading/writing data, is provided. According to preferred embodiments of the present invention, the at least one dedicated ports is a port for reading/writing streamed data, such as streaming audio and/or video data for example.

Abstract: An ASIC for implementing digital rights management includes a processor for requesting encrypted digital data from a server and decrypting the data, and a player for transforming the decrypted data to analog signals. Preferably, the ASIC is tamper-resistant. Preferably, all the management code of the ASIC is stored on a ROM in the ASIC. A device for receiving, decrypting and displaying encrypted digital data includes the ASIC, and also a transceiver for communicating with the server, a display mechanism for displaying the analog signals, and a nonvolatile memory for storing the encrypted data. A system for storing and displaying digital data includes both the server and the device. Preferably, the server is configured to send to the device only the encrypted digital data and associated decryption keys.