Patent Application
20100306857
This application claims priority under 35 U.S.C. §119 to Korean Patent Application No. 10-2009-0048021 filed on Jun. 1, 2009, the subject matter of which is hereby incorporated by reference.
The present inventive concept relates to data security technology, and more particularly, to data storage devices capable of efficiently preventing unauthorized access to security code by allowing command descriptor block (CDB) information to be read using only read-only memory (ROM) code. The inventive concept also relates to data storage systems including this type of data security technology.
Hard disk drives (HDDs) allow random data access, provide satisfactory data transmission rates, provide large data storage capacity, and are relatively inexpensive as compared with other types of auxiliary memory devices. For at least these reasons, HDDs are widely used to store (e.g.,) multimedia data. With wide use of HDDs, HDD data security is an important issue. Accordingly, HDD data is commonly encrypted and/or a user authentication procedure is required to access the HDD data.
Most HDD security functions require some form of security code such as an encryption key to authenticate a user or encrypt data. Security code must be protected from external attack, since an unauthorized user may incapacitate a security function by changing stored security code. Yet, the security code must remain readily accessible and changeable to an authorized user.
Security code is typically stored in a predetermined region of the HDD. It is commonly stored, accessed, and used via software or firmware. Access to this enabling software or firmware is restricted to only an authorized entity, such as the HDD manufacturer. However, it is sometimes necessary to access the software or firmware in order to upgrade capabilities, correct a programming bug, etc. Hence, a “security download function” accessing the software or firmware enabling the security functions of a HDD allows an authorized entity to make necessary changes. Unfortunately, the security download function not only allows necessary software/firmware downloads, but also creates a vulnerability that may be exploited by unauthorized entities seeking to incapacitate the security function.
Certain embodiments of the inventive concept provide a data storage device and system capable of protecting security code without impairing a constituent software/firmware download function.
According to certain embodiments of the inventive concept, there is provided a data storage device including: a command descriptor block (CDB) configured to store a command received from a host; a controller configured to control execution of an access operation directed to stored data when the received command is determined to be an access command, and further configured to control execution of a security operation associated with stored security code when the received command is determined to be a security command; and a switching circuit configured to selectively provide the received command from the CDB to the controller.
According to certain embodiments of the inventive concept, there is provided a data storage system including: a host and a data storage device, wherein the data storage device is configured to execute an access operation and a security operation. The data storage device comprises; a command descriptor block (CDB) configured to store a command received from a host, a controller configured to control execution of an access operation directed to stored data when the received command is determined to be an access command, and further configured to control execution of a security operation associated with stored security code when the received command is determined to be a security command, and a switching circuit configured to selectively provide the received command from the CDB to the controller.
According to certain embodiments of the inventive concept, there is provided a method of executing an oration in a data storage device storing data and security code, the method including; receiving a command in the data storage system from a host, storing the received command in a command descriptor block (CDB), determining whether the received command is an access command associated with an access operation directed to the stored data, or a security command associated with a security operation directed to the stored security code, upon determining that the received command is the access command, enabling a buffer disposed between the CDB and a controller to enable the buffer to pass the access command to the controller and calling an access command dispatcher to execute the access operation, and upon determining that the received command is the security command, disabling the buffer to prevent passing of the security command to the controller and calling a security command dispatcher to execute the security operation.
The above and other features and advantages of the inventive concept will become more apparent upon consideration of detail exemplary embodiments thereof with reference to the attached drawings in which:
The inventive concept now will be described in some additional detail with reference to the accompanying drawings. The inventive concept may, however, be embodied in many different forms and should not be construed as being limited to only the illustrated embodiments. Rather, the embodiments are presented as teaching examples.
It will be understood that when an element is referred to as being “connected” or “coupled” to another element, it can be directly connected or coupled to the other element or intervening elements may be present. In contrast, when an element is referred to as being “directly connected” or “directly coupled” to another element, there are no intervening elements present. As used herein, the term “and/or” includes any and all combinations of one or more of the associated listed items and may be abbreviated as “/”.
It will be understood that, although the terms first, second, etc. may be used herein to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another. For example, a first signal could be termed a second signal, and, similarly, a second signal could be termed a first signal without departing from the teachings of the disclosure.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the inventive concept. As used herein, the singular forms “a”, “an” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises” and/or “comprising,” or “includes” and/or “including” when used in this specification, specify the presence of stated features, regions, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, regions, integers, steps, operations, elements, components, and/or groups thereof.
Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this inventive concept belongs. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and/or the present application, and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.
Figure (
The CDB 110 stores a command received from a host 200. The command received by the CDB 110 may include an operation code, and/or it may define a logical block address, a transfer length, a control byte, etc.
The controller 130 generally controls access operations directed to the HDD based on the command received by the CDB 110. An access operation is an operation that is capable of effecting “payload” data and includes, as examples, a write (program) operation, an erase operation, and a read operation. Access operations are contrasted with security operations that are restricted to data controlling one or more security functions in the HDD. Thus, when a command (access or security) is provided by the host 200 to the controller 130, the CDB 110 temporarily stores the command, and may intermediately process the command before passing it to the controller 130.
The switching circuit 190 controls a buffer 120 positioned between the host 200 and controller 130. In its operation, the switching circuit 190 essentially enables/disables the buffer 120 such that the command received from the host 200 is selectively provided to the controller 130. In the illustrated embodiment of
The command classifier 140 determines whether a command stored in the CDB 110 is an access command or a security command. The command classifier 140 may be operated by means of a read-only memory (ROM) or similar device. As such, the command classifier 140 does not allow unauthorized user access and cannot be readily changed after the data storage device 100 is manufactured—unlike more readily programmable forms of code storage such as DRAM, SRAM, EEPROM, etc. After a command stored in the CDB 110 has been classified as an access command or a security command by the command classifier 140, the received command is dispatched according to its type. An exemplary dispatch operation is described in some additional detail with reference to
Referring to
Alternately, when it is determined that the received command is an access command (S220=NO), the command classifier 140 calls a second dispatcher 172 (S240). Thus, the second dispatcher 172 may be termed a read/write command dispatcher.
As is conventionally understood, the first and second dispatchers 171 and 172 may perform a dispatch operation using a “new command interrupt” technique. For instance, the dispatcher operation may include calling a defined function or set of functions configured to execute the command received from the host 200.
For example, as illustrated in
For instance, in a case where the command classifier 140 and the first dispatcher 171 are embodied as ROM code and the second dispatcher 172 may be embodied as random access memory (RAM) code or a flash code. Thus, when the command classifier 140 determines that a command stored in the CDB 110 is an access command, the second dispatcher 172 is called and the activation control unit 150 is deactivated while a RAM enable signal or a flash enable signal is activated. Accordingly, the buffer 120 may be enabled according to a result (e.g., a chip select signal CS) provided by an exclusive OR operation of a logic element 177. As a result, data stored in the buffer 120 may be transferred to the controller 130 from the buffer 120 as initially provided by the host 200.
Similarly, when the command classifier 140 determines that a command stored in the CDB 110 is a security command, the first dispatcher 171 is called and a ROM enable signal is activated. Accordingly, the buffer 120 may be enabled by the result CS of the exclusive OR operation performed by the logic element 177. As a result, data stored in the buffer 120 is transferred to the controller 130 of the buffer 120 receives data from the host 200.
When the first dispatcher 171 does not operate in ROM but operates in RAM or flash memory, the command classifier 140 is activated, but the F/F circuit 160 is deactivated by the RAM enable signal. As a result, the buffer 120 is disabled and data transfer from the host 200 to the controller 130 is interrupted.
Referring to
In addition, when the data storage device 100 is embodied as shown in
In order to prevent an unauthorized user from changing the security code, the security code may be stored in a ROM area. In other embodiments of the inventive concept, the security code may be stored in an area other than a ROM area which will be described in some additional detail below.
A data storage device, (e.g., a disk or a flash memory), may include a buffer memory. An encryption/decryption block may be provided between the buffer memory and a storage space. The encryption/decryption block may use an encryption key for encryption. The encryption key may be set correctly only when authentication to the data storage device is executed in a normal way. In otherwise cases, a wrong encryption key may be set. As a result, when an encrypted message or data is decrypted, an original message or data cannot be restored.
As for the data storage device having such security function, a security code executed by a security command may be encrypted and stored in the storage device while access code executed by an access command may be stored without encryption. To execute the security code, the data storage device may also use code overlay. An overlay code may be stored in the ROM area so as to be protected from unauthorized changes. Here, the access code can be downloaded as if in a normal drive, but the security code can be updated only when the data storage device is unlocked using a proper authentication procedure. Consequently, even if an unauthorized user knows the position in memory where the security code is stored, he/she will not be able to acquire access to the security code without going through the authentication procedure.
In the context of the foregoing computational system, certain embodiments of the inventive concept may be implemented as computer-executable programs and stored in computer-readable recording medium. The computer readable recording medium may include a program command, a data file, a data structure, or a combination thereof. The program command written to the computer readable recording medium may be specially designed and configured or may be already known to those skilled in the field of computer software. Examples of the computer readable recording medium include magnetic storage media (e.g., hard disks, floppy disks, and magnetic taps), optical recording media (e.g., CD-ROMs and DVDs), magneto-optical storage media (e.g., floptical disks), and hardware devices (e.g., ROMs, RAMs, PRAMs, RRAMs, FRAMs, and flash memories) configured to store and execute program commands.
When the computational system 1 is embodied as a portable device, it may further include a battery 350 to supply operating power. The portable device may be a portable computer, a digital camera, a personal digital assistant (PDA), a cellular telephone, a smart phone, an MP3 player, a portable multimedia player (PMP), an automotive navigation system, a memory card, a system card, a game console, an electronic dictionary, or a solid state disk.
The computational system 1 may also include an interface 330, e.g., an input/output unit, to communicate data with an external data processing device. When the computational system 1 is a wireless system, its may also include a wireless interface 340 which may be connected to the processor 320 and communicate data with an external wireless device. The wireless system may be a wireless device such as PDA, a portable computer, a wireless telephone, a pager, or a digital camera; a radio frequency identification (RFID) reader; or an RFID system. The wireless system may also a wireless local area network (WLAN) system or a wireless personal area network (WPAN) system. Moreover, the wireless system may be a cellular network.
When the computational system 1 is an image pick-up device, its may also include an image sensor 360 configured to convert an optical image into corresponding electrical signals. The image sensor 360 may be an image sensor using a charge coupled device (CCD) or a complementary metal-oxide semiconductor (CMOS) image sensor. For example, the computational system 1 may be a digital camera, a cellular telephone equipped with a digital camera, or a satellite system equipped with a camera.
A data storage device according to certain embodiments of the inventive concept may be implemented in various types of packaging. The various types of packaging may include a Package on Package (PoP), a Ball Grid Array (BGA), a Chip Scale Package (CSP), a Plastic Leaded Chip Carrier (PLCC), a Plastic Dual In-line Package (PDIP), a die in waffle pack, a die in wafer form, a Chip On Board (COB), a CERamic Dual In-line Package (CERDIP), a plastic Metric Quad Flat Pack (MQFP), a Thin Quad Flat Pack (TQFP), a Small Outline Integrated Circuit (SOIC), a Shrink Small Outline Package (SSOP), a Thins Small Outline Package (TSOP), a System In Packate (SIP), a Multi Chip Package (MCP), a Wafer-level Fabricated Package (WFP), and a Wafer-level processed Stack Package (WSP).
As described above, according to embodiments of the inventive concept, attacks on security code stored in a data storage device may be effectively prevented while yet fully enabling a software/firmware download function.
While the inventive concept has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those of ordinary skill in the art that various changes in forms and details may be made therein without departing from the scope of the inventive concept as defined by the following claims.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2009-0048021 | Jun 2009 | KR | national |
