Abstract: A secure data storage apparatus capable of independently holding security information within a hardware device of the storage apparatus, and of implementing write prohibition and read prohibition of data is provided. As means for specifying security such as write prohibition/write inquiry/read prohibition/read inquiry for data of a given size or a given number of pieces of data, a storage component for holding security information is prepared in addition to a storage component for holding data. For each unit of storage of the storage component for holding data, corresponding security data is held in the storage component for holding security information. In this way, in response to occurrence of a request to access data, security information corresponding to a storage area for holding the data is referred to, and an operation is performed in accordance with the security information.