Storage device for data-smuggling
View Patent ↗A computer-readable storage medium having computer-readable code embodied thereon including: program code for restricting access, by a file system running on a host system, to a restricted area of a storage area of a storage device; and program code for enabling at least one application to access the restricted area via the file system. Preferably, the computer-readable code further includes: program code for enabling the storage device to copy data from a non-restricted area to the restricted area. Preferably, the computer-readable code further includes: program code for directing the storage device to route host-system read-requests, directed to addresses in the restricted area, to addresses in a non-restricted area. Preferably, the computer-readable code further includes: program code for applying access commands of the host system to restricted data residing in the restricted area when the host system requests access to non-restricted data addressed to a non-restricted area.
1. A computing system comprising:
(a) a host system having:
(i) a file system and a block device driver for running on said host system; and
(ii) at least one application for running on said host system; and
(b) a storage device having:
(i) a controller for controlling said storage device; and
(ii) a storage area for storing information in said storage device;
and including a restricted portion and a non-restricted portion;
(c) a first mechanism for permitting access to said storage device, by said file system, via only said non-restricted portion; and
(d) a second mechanism, residing in said storage device, for enabling said at least one application to access said restricted portion via said file system and said non-restricted portion.
2. The computing system of claim 1 , wherein said second mechanism is configured to enable said storage device to copy data from said non-restricted portion to said restricted portion.
3. The computing system of claim 1 , wherein said second mechanism is operative to direct said storage device to route host-system read-requests, directed to addresses in said restricted portion, to addresses in said non-restricted portion.
4. The computing system of claim 1 , wherein said second mechanism is operative to apply access commands of said host system to data residing in said restricted portion when a data access request by said host system is addressed to said non-restricted portion.
5. A computer-readable storage medium having computer-readable code embodied on the computer-readable storage medium, the computer-readable code for managing a storage device, that includes a storage area having a restricted storage portion and a non-restricted storage portion, and that is operationally coupled to a host system having a file system whose access to the storage area of the storage device is limited to the non-restricted portion, the computer-readable code comprising program code for enabling an application running on the host system to access the restricted portion via the file system and the non-restricted portion.
6. The storage medium of claim 5 , wherein said access to the restricted portion by said application is enabled by steps including having said storage device copy data from the non-restricted portion to the restricted portion.
7. The storage medium of claim 5 , wherein said access to the restricted portion by said application is enabled by steps including routing host-system read-requests, directed to addresses in the restricted portion, to addresses in the non-restricted portion.
8. The storage medium of claim 5 , wherein said access to the restricted portion by said application is enabled by steps including: when the host system requests access to a data address in the non-restricted portion, applying access commands of the host system to data residing in the restricted portion.
9. A storage device, for storing data accessed by a host system using a file system, the storage device comprising:
(a) a storage area including a restricted portion and a non-restricted portion, access to the storage device by the host system via the file system being permitted via only said non-restricted portion; and
(b) a controller operative to enable an application running on the host system to access said restricted portion via the file system and said non-restricted portion.