Controller and advanced method for deleting data
A controller for a data storage device is disclosed. The controller includes an encryptor and electronic fuses. The electronic fuses is provided for storage of a key which is supposed to be used by the encryptor to encrypt user data before storing the user data in the data storage device. When a user deletes the user data, the controller changes at least one bit of the key stored in the electronic fuses from ‘0’ to ‘1’. Due to the change of the key stored in the electronic fuses for the encryptor, the deleted user data is fully prevented from leaking from the data storage device. A data storage device with a high confidential level is achieved.
1. A controller, comprising:
an instruction processor, receiving user data from an external device;
electronic fuses, storing a key;
an encryptor, encrypting the user data based on the key to generate encrypted data; and
a flash memory controller, storing the encrypted data to a flash memory,
wherein:
the instruction processor changes at least one bit data ‘0’ in the key stored in the electronic fuses to ‘1’ to invalidate an old version of the key and generate a modified key when receiving a delete instruction from the external device;
the delete instruction is for deleting user data; and
the modified key is used by the encryptor in subsequent user data encryption.
2. The controller as claimed in claim 1 , wherein:
the key has a length limit.
3. The controller as claimed in claim 1 , wherein:
the at least one bit data ‘0’ to be changed to ‘1’ is selected from the key stored in the electronic fuses randomly.
4. The controller as claimed in claim 1 , wherein:
the at least one bit data ‘0’ to be changed to ‘1’ is selected from the key stored in the electronic fuses in a specific order.
5. The controller as claimed in claim 1 , wherein:
the encryptor further generates correction code for the user data.
6. The controller as claimed in claim 1 , wherein:
the encrypted data is further randomized.
7. An advanced method for deleting data, comprising:
setting a length of a key;
using electronic fuses to store the key;
encrypting user data by the key to generate encrypted data;
changing at least one bit data ‘0’ in the key stored in the electronic fuses to ‘1’ to invalidate an old version of the key and generate a modified key when deleting user data; and
using the modified key in subsequent user data encryption.
8. The advanced method as claimed in claim 7 , wherein:
the at least one bit data ‘0’ to be changed to ‘1’ is selected from the key stored in the electronic fuses randomly.
9. The advanced method as claimed in claim 7 , wherein:
the at least one bit data ‘0’ to be changed to ‘1’ is selected from the key stored in the electronic fuses in a specific order.
10. The advanced method as claimed in claim 7 , further comprising:
generating correction code for the user data.