Abstract: A storage device includes a memory device storing data, and a controller controlling the memory device. The controller obtains and stores a certificate including a public key of an administrator from a host device, provides a nonce to the host device in response to a request from the host device, receives a token request signature including the nonce, a user identifier (ID), an allowed command list and a lifetime from the host device, and when it is verified that the token request signature is generated by a legitimate administrator by decrypting the token request signature with the public key, generates a token for allowing a user corresponding to the user ID to execute a command included in the allowed command list during the lifetime, and a token secret key corresponding to the token, and provides the token and the token secret key to the host device.

Abstract: A storage device includes a memory device including user memory blocks providing a user data region; and a controller configured to: map logical addresses used in a host to a portion of the user data region, and use a remaining portion of the user data region as an over-provisioning region, wherein the controller is further configured to control the memory device to: erase the user memory blocks based on a sanitize command from the host, provide, to the host, block address information of the user memory blocks based on a block address request from the host, access the user memory blocks based on block state check requests from the host, and provide, to the host, state information indicating whether the user memory blocks are erased according to access results.

Abstract: A storage device includes a memory device including user memory blocks providing a user data region; and a controller configured to: map logical addresses used in a host to a portion of the user data region, and use a remaining portion of the user data region as an over-provisioning region, wherein the controller is further configured to control the memory device to: erase the user memory blocks based on a sanitize command from the host, provide, to the host, block address information of the user memory blocks based on a block address request from the host, access the user memory blocks based on block state check requests from the host, and provide, to the host, state information indicating whether the user memory blocks are erased according to access results.

Abstract: A storage device includes a memory device storing data, and a controller controlling the memory device. The controller obtains and stores a certificate including a public key of an administrator from a host device, provides a nonce to the host device in response to a request from the host device, receives a token request signature including the nonce, a user identifier (ID), an allowed command list and a lifetime from the host device, and when it is verified that the token request signature is generated by a legitimate administrator by decrypting the token request signature with the public key, generates a token for allowing a user corresponding to the user ID to execute a command included in the allowed command list during the lifetime, and a token secret key corresponding to the token, and provides the token and the token secret key to the host device.