Physically modifying a data storage device to disable access to secure data and repurpose the data storage device
View Patent ↗A data storage device is disclosed comprising a non-volatile memory and control circuitry operable to evaluate a physical feature of the data storage device, wherein the physical feature is physically alterable by a user. When the physical feature is in a first state, host access to first secure data stored in the non-volatile memory is enabled, and when the physical feature is in a second state, the host access to the first secure data is disabled and host access to second data stored in the non-volatile memory is enabled.
1. A data storage device comprising:
a printed circuit board including a plurality of mounted chips each comprising internal circuitry;
a non-volatile memory; and
control circuitry operable to:
evaluate a physical feature of one of the chips, wherein the physical feature is physically alterable by a user;
when the physical feature is in a first state. enable host access to first secure data stored in the non-volatile memory; and
when the physical feature is in a second state, disable the host access to the first secure data and enable host access to second data stored in the non-volatile memory,
wherein the physical feature comprises a modifiable package of one of the chips, and modifying the package of one of the chips destroys at least part of the internal circuitry of the chip.
2. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to authenticate the host access to the first secure data.
3. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to disable the host access to the first secure data by erasing the first secure data.
4. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to disable host access to the first secure data by disabling access to locations of the non-volatile memory storing the first secure data.
5. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to encrypt the first secure data when stored in the non-volatile memory.
6. The data storage device as recited in claim 5 , wherein the control circuitry is further operable to disable the host access to the first secure data by erasing a decryption key for decrypting the first secure data.
7. The data storage device as recited in claim 1 , wherein the second data comprises plaintext data stored in the non-volatile memory.
8. The data storage device as recited in claim 1 , wherein:
the first secure data comprises first encrypted data encrypted using a first key; and
the second data comprises second encrypted data encrypted using a second key.
9. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to:
receive an access command from a host to access the first secure data; and
when the host access to the first secure data is disabled, return dummy data to the host.
10. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to:
receive an access command from a host to access the first secure data; and
when the host access to the first secure data is disabled, return an error message to the host.
11. The data storage device as recited in claim 1 , wherein the physical feature comprises a detachable chip using a pull strip.
12. The data storage device as recited in claim 1 , wherein the control circuitry is further operable to disable the host access to the first secure data by configuring a flag stored in the non-volatile memory.
13. The data storage device as recited in claim 1 , wherein the data storage device comprises a disk drive comprising a disk and a head actuated over the disk.
14. The data storage device as recited in claim 1 , wherein the data storage device comprises a solid state drive comprising a non-volatile semiconductor memory.
15. A method of operating a data storage device, the data storage device comprising a printed circuit board including a plurality of mounted chips each comprising internal circuitry, and a non-volatile memory, the method comprising:
evaluating a physical feature of one of the chips, wherein the physical feature is physically alterable by a user;
when the physical feature is in a first state, enabling host access to first secure data stored in the non-volatile memory; and
when the physical feature is in a second state, disabling the host access to the first secure data and enable host access to second data stored in the non-volatile memory,
wherein the method is performed by a control circuitry of the data storage device, the physical feature comprises a modifiable package of one of the chips, and modifying the package of one of the chips destroys at least part of the internal circuitry of the chip.
16. The method as recited in claim 15 , further comprising authenticating the host access to the first secure data.
17. The method as recited in claim 15 , wherein disabling the host access to the first secure data comprises erasing the first secure data.
18. The method as recited in claim 15 , wherein disabling the host access to the first secure data comprises disabling access to locations of the non-volatile memory storing the first secure data.
19. The method as recited in claim 15 , further comprising encrypting the first secure data when stored in the non-volatile memory.
20. The method as recited in claim 19 , wherein disabling the host access to the first secure data comprises erasing a decryption key for decrypting the first secure data.
21. The method as recited in claim 15 , wherein the second data comprises plaintext data stored in the non-volatile memory.
22. The method as recited in claim 15 , wherein:
the first secure data comprises first encrypted data encrypted using a first key; and
the second data comprises second encrypted data encrypted using a second key.
23. The method as recited in claim 15 , further comprising:
receiving an access command from a host to access the first secure data; and
when the host access to the first secure data is disabled, returning dummy data to the host.
24. The method as recited in claim 15 , further comprising:
receiving an access command from a host to access the first secure data; and
when the host access to the first secure data is disabled, returning an error message to the host.
25. The method as recited in claim 15 , wherein the physical feature comprises a detachable chip using a pull strip.
26. The method as recited in claim 15 , wherein disabling the host access to the first secure data comprises configuring a flag stored in the non-volatile memory.
27. The method as recited in claim 15 , wherein the data storage device comprises a disk drive comprising a disk and a head actuated over the disk.
28. The method as recited in claim 15 , wherein the data storage device comprises a solid state drive comprising a non-volatile semiconductor memory.