Data storage device with built-in data protection for ultra sensitive applications
View Patent ↗An apparatus comprises a data storage medium; a remote unit; and an authorization unit for encrypting information to be stored on the storage medium and for controlling access to data stored on the data storage medium in response to the access control signals received from the remote unit. A method of controlling access to data stored on the data storage medium is also provided.
1. An apparatus comprising:
a data storage device including a data storage medium;
a first remote unit; and
an authorization unit within the data storage device for encrypting information to be stored on the data storage medium using a key received from the first remote unit, wherein the key is stored in volatile memory in the data storage device.
2. The apparatus of claim 1 , wherein the authorization unit comprises:
a processor for encrypting information to be stored on the storage medium; and
the key comprises a private key for use by the processor.
3. The apparatus of claim 2 , wherein the authorization uses a combination of the private key and a public key for encrypting information to be stored on the storage medium.
4. The apparatus of claim 1 , further comprising:
a transmitter for transmitting information about a status of the data storage device to the first remote unit.
5. The apparatus of claim 1 , wherein the remote unit comprises:
a user interface;
a key memory;
a transmitter; and
a processor for controlling the transfer of a key from the key memory to the transmitter in response to the user interface.
6. The apparatus of claim 1 , wherein the remote unit communicates with the authorization unit over a wireless channel.
7. The apparatus of claim 1 , further comprising:
a second remote unit for providing an access control signal to the authorization unit in response to an altimeter.
8. The apparatus of claim 1 , further comprising:
a second remote unit for providing an access control signal to the authorization unit in response to spatial coordinates of the apparatus.
9. The apparatus of claim 1 , wherein the remote unit further comprises:
a signaling device; and
an override device.
10. The apparatus of claim 1 , wherein the key is lost when the data storage device shuts down or loses power.
11. The apparatus of claim 1 , wherein the remote unit contains a user rights database.
12. A method comprising:
using an authorization unit within a data storage device to encrypt data to be stored on a data storage medium using a key received from a first remote unit, wherein the key is stored in volatile memory in the data storage device.
13. The method of claim 12 , wherein the key is lost when the data storage device shuts down or loses power.
14. The method of claim 12 , wherein the key comprises a private key.
15. The method of claim 14 , wherein the authorization unit uses a combination of the private key and a public key for encrypting information to be stored on the storage medium.
16. The method of claim 12 , wherein the remote unit comprises:
a user interface;
a key memory;
a transmitter; and
a processor for controlling the transfer of key data from the key memory to the transmitter in response to the user interface.
17. The method of claim 12 , further comprising:
using a second remote unit to provide an access control signal to the authorization unit in response to an altimeter.
18. The method of claim 12 , further comprising:
using a second remote unit to provide an access control signal to the authorization unit in response to spatial coordinates of the apparatus.
19. The method of claim 12 , wherein the key that is changed on a regular or irregular basis.
20. The method of claim 12 , wherein the authorization unit corrupts data stored on the storage medium in response to a distress signal.