Security indicator on a data storage device
A data storage device comprising a non-volatile storage medium configured to store user data, a data port configured to transmit data between a host computer system and the data storage device, a data security indicator, and a controller. The controller is configured to selectively control access of the host computer system to the user data based on security configuration data of the data storage device. The controller is further configured to respond to the occurrence of one or more operations, the operations being any of: (i) a data access operation requested or performed, by the host computer system, on the data storage device to access the storage medium via the data port; and (ii) a security control operation requested or performed, by an external device, on the data storage device to store, retrieve or update the security configuration data of the data storage device. The response of the controller includes generating an indicator control signal to cause the data security indicator to indicate one or more security parameters associated with the one or more operations.
1. A data storage device comprising:
a non-volatile storage medium configured to store user data;
a data port configured to transmit data between a host computer system and the data storage device;
a data security indicator; and
a controller configured to:
selectively control access of the host computer system to the user data based on security configuration data of the data storage device;
receive, from the host computer system, a request for a data access operation to access user data of the storage medium via the data port;
process the request and the security configuration data to determine:
one or more data-access security parameters to be indicated to the user; and
one or more corresponding indicator components of the data security indicator to perform the indication; and
in response to the request, generate an indicator control signal to cause the determined indicator components of the data security indicator to indicate the determined one or more data-access security parameters associated with the data access operation, wherein:
the one or more data-access security parameters associated with the data access operation comprises a security state of the user data; and
the security state is either:
a secure state in which the user data is logically protected; or
a non-secure state in which the user data is logically unprotected.
2. The data storage device according to claim 1 , wherein:
the one or more data-access security parameters associated with the data access operation further comprises a type of data access operation; and
the type is either:
a read type in which the user data is read from the storage medium by the data access operation; or
a write type in which the user data is written to the storage medium by the data access operation.
3. The data storage device according to claim 2 , wherein the data security indicator comprises:
a first indicator component indicating the security state of the user data; and
a second indicator component indicating the type of the data access operation.
4. The data storage device according to claim 1 , further comprising a cryptography engine connected between the data port and the storage medium, and wherein the controller is further configured to:
in response to selectively setting the security state of the user data to the secure state:
instruct the cryptography engine to use an encryption key to perform an encryption function to selectively encrypt the user data; and
in response to selectively setting the security state of the user data to the non-secure state:
instruct the cryptography engine to use a decryption key to perform a decryption function to selectively decrypt the user data.
5. The data storage device according to claim 1 , wherein the controller is further configured to:
receive a request for a security control operation from a device security application executing, at least partially, on a processor of an external device;
process the received request to:
store, retrieve or update one or more values of the security configuration data of the data storage device; and
determine:
one or more device-level security parameters to be indicated to a user; and
a corresponding indicator component of the data security indicator to perform the indication; and
generate an indicator control signal to cause the determined indicator component to indicate the determined one or more device-level security parameters.
6. The data storage device according to claim 5 , wherein the data storage device is configured to communicate with the device security application of the external device via a secure wireless communication channel.
7. The data storage device according to claim 6 , wherein the determined one or more device-level security parameters include one or more of:
an access state of the data storage device;
a connection state of the secure wireless communication channel; and
an activation state of one or more security functions of the device security application with respect to the data storage device.
8. The data storage device according to claim 7 , wherein the one or more security functions of the data storage device comprise:
a location sharing function configured to transmit location data of the data storage device to the external device; and
a data protection function configured to generate record data representing utilization of the storage medium of the device.
9. The data storage device according to claim 1 , wherein the data security indicator includes one or more display components configured to visually represent at least one security parameter.
10. The data storage device according to claim 9 , wherein the security configuration data includes a display component mapping assigning the at least one security parameter to a corresponding display component, such that the corresponding display component visually represents values of at least one security parameter.
11. The data storage device according to claim 9 , wherein the one or more display components are configured to:
display an element indicating a value of a represented security parameter; and
change the displayed element in response to a voltage applied to the display component.
12. The data storage device according to claim 11 , wherein the generation of the indicator control signal by the controller comprises:
determining the value of the represented security parameter;
determining an indication element corresponding to the represented security parameter based on a mapping of, at least, a set of possible security parameter values to associated discrete values with corresponding elements; and
determining a voltage to apply to the display component to change the displayed element to the indication element.
13. The data storage device according to claim 12 , wherein the data storage device further comprises an indicator control circuit configured to control operation of the one or more display components to indicate the represented security parameters for an indication duration.
14. The data storage device according to claim 13 , wherein the controller is further configured to set the indication duration of a data access operation to be shorter than the indication duration of a security control operation.
15. The data storage device according to claim 13 , wherein:
the display component is a light emitting diode (LED) configured to selectively display one or more colors;
the indicator control circuit is further configured to, in response to receiving the generated indicator control signal:
apply the determined voltage to the LED to change a displayed color of the LED to an indication color; and
cease application of the determined voltage to the LED after a lapsing of the indication duration;
the indication duration is a period of time commencing on the change of the displayed color to the indication color; and
the indicator control circuit is further configured to, responsive to cessation of the application of the determined voltage to the LED, cause the LED to assume an off state in which no color is displayed.
16. The data storage device according to claim 15 , wherein:
the indicator control circuit is further configured to, responsive to cessation of the application of the determined voltage to the LED, apply a pre-specified voltage to cause the LED to change the displayed color to an auxiliary color; and
the auxiliary color does not correspond to any color of the set of possible security parameter values.
17. The data storage device according to claim 13 , wherein:
the display component is a surface having an electrochromic material configured change the displayed element by changing a color of the surface in response to a voltage applied to the electrochromic material to indicate the value of the represented security parameter; and
the indicator control circuit is further configured to:
apply the determined voltage to the electrochromic material to change a displayed color of the surface to an indication color; and
cease application of the voltage to the electrochromic material after change of the color of the surface to the indication color, such that the surface is configured to retain the indication color after cessation of the application of the voltage.
18. The data storage device according to claim 12 , wherein:
the display component is a display panel configured to display an electronic label on a substrate in response to a voltage applied to one or more regions of the substrate; and
the electronic label indicates the value of the represented security parameter.
19. A data storage device comprising:
means for storing user data;
means for transmitting data between a host computer system and the data storage device;
means for indicating a set of parameters, wherein:
the means for indicating the set of parameters includes one or more display components configured to visually represent at least one security parameter; and
the one or more display components are configured to:
display an element indicating a value of a represented security parameter; and
change the displayed element in response to a voltage applied to the display component;
means for selectively controlling access of the host computer system to the user data based on security configuration data of the data storage device; and
means for, in response to the occurrence of one or more operations, generating an indicator control signal to cause the means for indicating a set of parameters to indicate one or more security parameters associated with the one or more operations, wherein the one or more operations are any of:
(i) a data access operation requested or performed, by the host computer system, on the data storage device to access the means for storing user data via the means for transmitting data between a host computer system and the data storage device; and
(ii) a security control operation requested or performed, by an external device, on the data storage device to store, retrieve or update the security configuration data of the data storage device.
20. A method for providing security indications of a data storage device, the method executed by a controller of the data storage device and comprising:
selectively controlling access of a host computer system to user data stored on a non-volatile storage medium of the data storage device based on security configuration data of the data storage device;
receiving a request for a security control operation from a device security application executing, at least partially, on a processor of an external device;
processing the received request to:
store, retrieve or update one or more values of the security configuration data of the data storage device; and
determine:
one or more device-level security parameters to be indicated to a user; and
a corresponding indicator component of a data security indicator of the data storage device to perform the indication; and
in response to processing the received request, generating an indicator control signal to cause the determined indicator component of the data security indicator of the data storage device to indicate the determined one or more device-level security parameters.