External storage device and method of controlling the device
View Patent ↗After an initialization process (S 10 ), the access controller of the external storage device performs authentication using a password (S 20 , S 30 ). If authentication is successful, the successfully authenticated state is saved, and the host computer is notified that the HD storage portion is accessible (S 40 ). Subsequently, it is decided whether SOF packets are being periodically sent from the host computer (S 50 ), and if periodic sending has been interrupted (S 50 : NO), the connection to the host computer will be deemed lost, and the saved authenticated state will be deleted (S 60 ).
1. An external storage device adapted for detachable attachment to an external device, comprising:
an interface configured to connect to the external device;
a storage portion configured to encrypt and store data;
a decryption portion configured to decrypt the stored data of the storage portion;
an authentication portion configured to authenticate whether access to the storage portion from the external device via the interface is legitimate; and
an access control portion configured to control access to the storage portion by the external device through the interface, wherein
in case where the access to the storage portion from the external device is authenticated to be legitimate by the authentication portion, the access control portion performs permission control, wherein, in the permission control, the access control portion controls the decryption portion to decrypt the stored data of the storage portion according to access to the storage portion from the external device being legitimate after the successful authentication;
in case where connection between the external device and the interface is lost, the access control portion performs prohibition control, wherein, in the prohibition control, the access control portion does not control the decryption portion to decrypt the stored data of the storage portion according to access to the storage portion from the external device being legitimate even after the successful authentication; and
an authentication state storage portion configured to store information, wherein
the access control portion stores in the authentication state storage portion information which shows the access from the external device is legitimate, in case where the access to the storage portion from the external device is authenticated to be legitimate by the authentication portion; and cancels the information of the legitimateness, in case where the connection between the external device and the interface is lost, wherein
when access to the storage portion is required by the external device after the authentication that the access to the storage portion from the external device is legitimate, the access control portion performs the permission control, in case where the information of the legitimateness is stored in the authentication state storage portion and is not cancelled, and
when access to the storage portion is required by the external device after the authentication that the access to the storage portion from the external device is legitimate, the access control portion performs the prohibition control, in case where the information of the legitimateness is not stored in the authentication state storage portion or is cancelled.
2. The external storage device in accordance with claim 1 wherein
the access control portion performs the prohibition control, in case where packets issued by the external device have not been received via the interface for a prescribed time interval or longer, as the case that the connection between the external device and the interface is lost.
3. The external storage device in accordance with claim 1 wherein
the interface is adapted to receive supply of power from the external device; and
the access control portion performs the prohibition control, in case where the supply of power to the interface from the external device stops, as the case that the connection between the external device and the interface is lost.
4. A method of controlling an external storage device adapted to encrypt and store data in a storage portion of the external storage device, comprising steps of:
authenticating whether access to the storage portion from an external device is legitimate;
in case where the access to the storage portion from the external device is authenticated to be legitimate, performing decryption of stored data of the storage portion according to access to the storage portion from the external device being legitimate after the successful authentication and storing in an authentication state storage portion information which shows the access from the external device is legitimate; and
in case where the connection between the external device and the external storage device is lost, prohibiting decryption of the stored data of the storage portion according to access to the storage portion from the external device being legitimate even after the successful authentication and canceling the information of the legitimateness;
when access to the storage portion is required by the external device after the authentication that the access to the storage portion from the external device is legitimate,
performing the permission control, in case where the information of the legitimateness is stored in the authentication state storage portion and is not cancelled, and
when access to the storage portion is required by the external device after the authentication that the access to the storage portion from the external device is legitimate,
performing the prohibition control, in case where the information of the legitimateness is not stored in the authentication state storage portion or is cancelled.