Abstract: A storage device has a storage medium, a set of credentials stored on the storage medium, and a controller. The controller within the storage device is coupled to the storage medium, and adapted to identify security status of the storage device. The controller is adapted to alter one or more credentials of the set of credentials responsive to the security status.

Abstract: A storage device includes an interface for receiving and outputting messages for processing data units, wherein each data unit includes message input field parameters, message output field parameters, and content field parameters, a non-volatile memory for storing data units, a volatile memory, and a processor coupled to the interface, the non-volatile memory and the volatile memory, for manipulation of the parameter values in the data units, and storing the data units in at least one of the non-volatile memory and the volatile memory.

Abstract: A method for providing enhanced security features in a storage device involves partitioning a storage media in the storage device into a hidden partition and a storage partition in the storage media. A base class is written to the hidden partition. A security provider base class is instantiated from the base class. The security provider base class is adapted to control access to the storage media.

Abstract: A method for recovering a password includes: obtaining a request code from a data storage device, transmitting the request code to an external authority that produces a recovery code from the request code, and using the recovery code to recover a password and an encryption key from a hidden area of the data storage device. An apparatus that can be used to implement the method is also provided.

Abstract: A data storage device (such as a magnetic disk drive), which has a built-in encryption function using a self generated cipher key. The data storage device uses the cipher key to routinely encrypt the incoming data without instruction and/or control by the host system or other components that are external to the device and its dedicated controls (e.g., a disk drive controller card). The encryption function is a built-in function or self-contained function of the drive and/or it dedicated controller. To permanently delete the entire content of the drive, the cipher key is located and erased to render the ciphertext that is stored in the storage device unusable. In another embodiment of the present invention, the data disposal is managed on a file basis through the use of a plurality of internally generated file-specific cipher keys, which are managed through the aid of an internal key library.

Abstract: A method for recovering a password includes: obtaining a request code from a data storage device, transmitting the request code to an external authority that produces a recovery code from the request code, and using the recovery code to recover a password and an encryption key from a hidden area of the data storage device. An apparatus that can be used to implement the method is also provided.

Abstract: A storage device includes an interface for receiving and outputting messages for processing data units, wherein each data unit includes message input field parameters, message output field parameters, and content field parameters, a non-volatile memory for storing data units, a volatile memory, and a processor coupled to the interface, the non-volatile memory and the volatile memory, for manipulation of the parameter values in the data units, and storing the data units in at least one of the non-volatile memory and the volatile memory.

Abstract: An apparatus comprises a data storage device, and a security partition in the data storage device containing information defining a time period in which a user is authorized to access data stored in the data storage device. A method performed by the apparatus is also provided.

Abstract: A storage device has a storage medium, a set of credentials stored on the storage medium, and a controller. The controller within the storage device is coupled to the storage medium, and adapted to identify security status of the storage device. The controller is adapted to alter one or more credentials of the set of credentials responsive to the security status.

Abstract: A data storage system comprises a storage element, and an encryption and decryption unit connected between a host and the storage element, and using a key that is generated in the data storage system.