A PORTABLE DATA STORAGE DEVICE HAVING A SECURE MODE OF OPERATION
A portable data storage device (10) includes a universal serial bus (USB) coupling device (1) and an interface device (2) is coupled to the USB coupling device (1). The portable data storage device (10) also includes a memory control device (3) and a non-volatile solid-state memory device (4). The memory control device (3) is coupled between the interface device (2) and the memory device (4) to control the flow of data from the memory device (4) to the USB coupling device (1). An authorization input is received from the user of the portable data storage device, a comparison is made comparing the authorization input from the user of the portable data storage device with authorization data stored on the portable data storage device; and access to requested data is granted or denied depending on whether the authorization input from the user corresponds to the stored authorization data.
Latest TREK TECHNOLOGY (SINGAPORE) PTE, LTD. Patents:
This application is a continuation of now pending U.S. patent application Ser. No. 11/415,603 filed May 1, 2006, which is a continuation of U.S. patent application Ser. No. 10/742,644 filed on Dec. 19, 2003, issued as U.S. Pat. No. 7,039,759 on May 2, 2006, which is a continuation of U.S. patent application Ser. No. 09/803,157 filed on Mar. 9, 2001, issued as U.S. Pat. No. 6,880,054 on Apr. 12, 2005, which claims priority to International Patent Application No. PCT/SG00/00029, filed Feb. 21, 2000 incorporated herein by reference in their entirety.
FIELD OF THE INVENTIONThe invention relates to a portable data storage device, and in particular, a portable data storage device for a computer.
BACKGROUNDConventional data storage devices generally fall into two categories. The first category is electronic, solid-state memory devices such as read only memory (ROM) and random access memory (RAM). These memory devices are generally fitted within the computer. They are not intended to be removable or portable so that they may be used on different computers, for example, to permit the transfer of data from one computer to another computer.
The second type of device is surface based data storage devices in which data is stored, typically, on the surface of a disk or tape. Examples of surface storage devices are magnetic disks and CD ROMs. Such data storage devices require a mechanical drive mechanism to be installed in or coupled to the computer to permit the data on the storage device to be read by the computer. In addition, such memory devices are limited by the surface area of the storage device, and the combination of the storage device and the drive mechanism for reading data from the storage device is generally bulky and/or delicate due to the moving parts that are required within the drive mechanism and/or storage device.
SUMMARY OF THE INVENTIONIn accordance with the present invention, there is provided a portable data storage device comprising a coupling device for coupling to a computer serial bus, an interface device coupled to the coupling device, a memory control device and a non-volatile solid-state memory device; the memory control device being coupled between the interface device and the memory device to control the flow of data from the memory device to the coupling device.
An advantage of the invention is that by providing a portable data storage device comprising a coupling device with an interface device, memory control device and a non-volatile solid-state memory device, it is possible to provide a portable data storage device which may be coupled to a computer having a serial bus port and which does not include moving parts or require a mechanical drive mechanism to read the data from the data storage device.
Preferably, the non-volatile solid-state memory device may be a read/write memory device, such as a flash memory device.
Preferably, where the memory device is a read/write memory device, the memory control device controls the flow of data to and from the memory device.
Typically, the data storage device further comprises a manually operated switch movable between a first position in which writing of data to the memory device is enabled, and a second position in which writing of data to the memory device is prevented.
Preferably, the memory control device may include a read only memory which stores a program to control the operation of the memory control device. Preferably, the memory control device is a micro-controller.
Typically, the interface device comprises a universal serial bus (USB) driver to convert data between a USB format and a PC format, and the coupling device comprises a USB coupling device.
Alternatively, the interface device comprises a driver for IEEE 1394 (Firewire) protocol, and the coupling device comprises a Firewire coupling device.
BRIEF DESCRIPTION OF THE DRAWINGSAn example of a data storage device in accordance with the invention will now be described to the accompanying drawings, in which:
The operations performed by the micro-controller 3 include comparing passwords entered by a user with a corresponding password stored in the flash memory 4 to determine whether the user is authorized to access the contents of the flash memory 4. The program stored in the ROM 5 also controls the data flow to and from the flash memory 4 and can also detect whether the computer to which the memory device 1 is coupled has installed software programs which correspond to passwords stored in the flash memory 4. The micro-controller 3 can automatically retrieve passwords from the installed software to compare with passwords stored in the flash memory to verify that a user of the computer is authorized to access and run the software. In addition, the program stored in the ROM 5 also permits the setting of a password in the flash memory by a software supplier to correspond to the password contained in software supplied to a user. Typically, the password may correspond to the serial number of the software.
The flash memory 4 is typically divided into a number of different sections or zones. Typically, the flash memory is divided into two zones and each zone has a unique password. If the data storage device 10 is supplied with packaged software, the software serial number can be set in one zone to be the password to permit a user to access and use the software. The other zone, which can be used typically for storing a user's data, may have a separate password which is set by the user. Typically, the passwords are stored in a secure location of the flash memory in an encrypted form. The encryption, decrypfion, data flow control and USB protocol are all managed by the micro-controller 3.
The micro-controller 3 also includes a random access memory (RAM) 6 which is a temporary storage area to permit functioning of the micro-controller 3. In addition, a manual switch 7 is coupled between the flash memory 4 and the micro-controller 3. The manual switch 7 is movable between a first position in which a user may write data to the flash memory 4 and a second position in which data is prevented from being written to the flash memory 4.
The device 10 also includes a USB socket 8 that is coupled directly to the USB plug 1 and permits other USB devices to be coupled to the USB via the device 10. For example, if a user wishes to increase memory space, a USB plug 1 of a second memory device 10 may be connected to the USB socket 8.
After an end user has performed the initial password set up procedure described above and shown in
If zone 1 is selected, the device 10 assumes that the user wishes to install software on the computer which is stored in the flash memory 4 and requests 37 the appropriate password for confirmation that the user is authorized to install the software. The micro-controller 3 receives the password entered by the user, retrieves the zone 1 password stored in the flash memory 4, decrypts the zone 1 password and compares it with the password entered by the user to authenticate 38 whether the user is authorized to install the software. If the passwords do not match, the device 10 prompts the computer to request 37 the user to enter the password again.
If the password entered by the user matches the password stored in the flash memory 4, the micro-controller 3 starts 39 the software installation from the flash memory 4 to the computer. In order to install software, the computer sends 40 a read/write command in USB format to the micro-controller 3 for data, the micro-controller 3 retrieves the requested data from the flash memory 4 and sends 41 the data to the driver 2. The driver 2 converts 42 the data to PC format and outputs the data to the computer through the USB plug 1. The micro-controller 3 then checks 43 whether the software installation is complete. If the operation is not complete, the operation returns to step 40. If the installation of the software is complete, the status flag stored in the flash memory 4 is changed to “Y” and the device 10 may then be removed 45 from the USB socket on the computer.
If a user selects zone 2, the micro-controller 3 sends a command to the computer to request 46 the user to enter the password for zone 2. When the user enters the password, the computer sends the password to the micro-controller 3. The micro-controller 3 retrieves the password for zone 2 from the flash memory 4, decrypts 47 the password and compares it with the password entered by the user. If the password entered by the user is incorrect, the operation returns to step 46 and the computer requests 46 the user for the password again.
If the password entered by the user is correct, the user has access to zone 2 of the flash memory 4 to read data from the flash memory 4 and to write data to the flash memory 4. However, data can only be written to the flash memory 4 if the manual switch 7 is in the position to permit data to be written to the flash memory 4. In order to read or write data from or to the flash memory 4 a read or write command is sent 48 by the computer in USB format to the micro-controller 3. In response to the read or write command the micro-controller 3 either retrieves 49 data from the flash memory 4 and sends it to the driver 2 for conversion 50 to PC format and then to be output to the computer or receives data from the driver to write it to the flash memory 4.
The micro-controller 3 then determines 51 whether the read or write operation is complete. If the operation is not complete it returns to step 48. If the operation is complete the operation terminates 52.
The device 10 described above is for coupling to a universal serial bus (USB). However, the plug 1, the interface device 2 and socket 8 could be for use with any appropriate computer serial bus. For example, the device 10 could be modified for use with IEEE 1394 (Firewire) protocol by substituting the USB plug 1, USB interface device 2 and socket 8 with a Firewire protocol compatible plug, interface device and socket respectively.
An advantage of the device 10 described above is that it provides a portable data storage device for a computer which does not require a mechanical operated reading/writing device. In addition, the device 10 has no moving parts. This enables to data storage device 10 to be more compact than conventional portable data storage devices.
Claims
1. A method of restricting access to data on a portable data storage device capable of being coupled to a computer system, the method comprising the steps of:
- receiving a portable data storage device that comprises a USB plug capable of being coupled to a USB socket of the computer system, a memory including non-volatile solid-state memory having sufficient capacity to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD, and a memory controller coupled to the memory capable of controlling data flow to and from the memory, wherein access to at least a portion of data on the memory is restricted absent confirmation of a user's authorization;
- receiving an authorization input from the user of the portable data storage device;
- comparing the authorization input from the user of the portable data storage device with authorization data stored on the portable data storage device; and provided that the authorization input from the user corresponds to the stored authorization data, granting the user of the portable data storage device access to requested data.
2. The method of claim 1, further comprising the step of decrypting the stored authentication data.
3. The method of claim 1, further comprising the step of denying the user of the portable data storage device access to the requested data provided that the authorization input does not correspond to the stored authentication data.
4. A unitary portable data storage device comprising:
- universal serial bus (USB) plug integrated into the unitary portable data storage device, without an intervening cable, capable of coupling the unitary portable data storage device directly to a USB socket of a computer;
- an interface coupled to the USB plug, the interface allowing the unitary portable data storage device to communicate via the USB protocol;
- a non-volatile solid-state memory, the memory having sufficient capacity to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD; and
- a memory controller coupled between the interface and the memory to control the flow of data between the memory and the USB plug in a manner to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD and to implement access restriction,
- wherein access to at least a portion of the data in the memory is restricted absent confirmation of a user's authorization obtained by comparing an authorization input obtained from the user of the portable data storage device with authorization data stored on the portable data storage device.
5. The unitary portable data storage device as recited in claim 4 wherein the memory controller comprises a micro-controller.
6. The unitary portable data storage device as recited in claim 4 wherein the memory comprises a read/write memory.
7. The unitary portable data storage device as recited in claim 4 wherein the memory comprises flash memory.
8. The unitary portable data storage device as recited in claim 4 wherein the unitary portable data storage device is sufficiently compact to be held within a human hand for maximal portability.
9. An integrated portable data storage device comprising:
- universal serial bus (USB) plug integral to the integrated portable data storage device, the integrated portable data storage device capable of being directly connected to a USB socket of a computer via the USB plug such that there is an immediate connection between the integrated portable data storage device and the computer without cable interconnection;
- an interface coupled to the USB plug, the interface allowing the integrated portable data storage device to communicate via the USB protocol;
- non-volatile solid-state memory, the memory having sufficient capacity to enable the integrated portable data storage device to serve as an alternative to a magnetic disk or CD; and
- a memory controller coupled to the memory to control the flow of data between the memory and the USB plug in a manner to enable the integrated portable data storage device to serve as an alternative to a magnetic disk or CD and to implement access restriction wherein access to at least a portion of the data in the memory is restricted absent confirmation of a user's authorization obtained by comparing an authorization input obtained from the user of the portable data storage device with authorization data stored on the portable data storage device; and
- wherein the USB plug, the memory and the memory controller are part of an integrated device with a portion of the USB plug protruding the integrated device to facilitate direct coupling to the USB socket.
10. The integrated portable data storage device as recited in claim 9 wherein the memory controller comprises a micro-controller.
11. The integrated portable data storage device as recited in claim 9 wherein the memory comprises a read/write memory.
12. The integrated portable data storage device as recited in claim 9 wherein the memory comprises flash memory.
13. The integrated portable data storage device as recited in claim 9 wherein the integrated portable data storage device is sufficiently compact to be held within a human hand for maximal portability.
14. A unitary portable data storage device comprising:
- universal serial bus (USB) plug integrated into the unitary portable data storage device, without an intervening cable, capable of coupling the unitary portable data storage device directly to a USB socket of a computer;
- an interface coupled to the USB plug, the interface allowing the unitary portable data storage device to communicate via the USB protocol;
- a non-volatile solid-state memory, the memory having sufficient capacity to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD; and
- a memory controller coupled to the memory and responsive to a stored program to cooperatively control the flow of data between the memory and the computer to enable the unitary portable data storage device to serve as an alternative to a magnetic disk or CD and to implement access restriction,
- wherein access to at least a portion of the data in the memory is restricted absent confirmation of a user's authorization obtained by comparing an authorization input obtained from the user of the portable data storage device with stored authorization data.
15. The unitary portable data storage device as recited in claim 14 wherein the memory controller comprises a micro-controller.
16. The unitary portable data storage device as recited in claim 14 wherein the memory comprises a read/write memory.
17. The unitary portable data storage device as recited in claim 14 wherein the memory comprises flash memory.
18. The unitary portable data storage device as recited in claim 14 wherein the unitary portable data storage device is sufficiently compact to be held within a human hand for maximal portability.
Type: Application
Filed: May 30, 2006
Publication Date: Oct 12, 2006
Applicant: TREK TECHNOLOGY (SINGAPORE) PTE, LTD. (SINGAPORE)
Inventors: Chong Cheng (Singapore), Teng Poo (Singapore)
Application Number: 11/420,907
International Classification: G06F 13/38 (20060101);