Memory system and storage system managing first and second account information for authentication of first and second accounts
According to one embodiment, a memory system includes a nonvolatile memory and a controller. The controller manages first account information to be used for authentication of a first account and second account information to be used for authentication of a second account. The controller receives third account information from a host device. When the third account information matches the first account information, the controller permits access to at least a partial storage area of the nonvolatile memory based on a request from the host device and transmits first data that includes the second account information to a first memory system.
1 . A memory system comprising:
a memory; and
a controller connectable to a network via a first interface and configured to:
communicate with a first memory system via the first interface through the network, the first interface conforming to a first standard, wherein
the controller is configured to:
manage first account information stored in the memory, the first account information being used for authentication of a first account of the first memory system;
receive first data that includes second account information from the first memory system; and
permit the first memory system to access the memory when the second account information included in the first data matches the first account information.
2 . The memory system according to claim 1 , wherein
the controller is further configured to:
when the first memory system is permitted to access the memory system,
write data received from the first memory system into the memory system, or
transmit data read from the memory of the memory system to the first memory system.
3 . The memory system according to claim 1 , wherein
the controller is further configured to:
store the first account information, which is encrypted, in the memory system;
receive first signature data for the first data;
when authenticity of the first data is confirmed using the first signature data, decrypt the second account information that is encrypted and is included in the first data and decrypt the encrypted first account information; and
when the decrypted second account information matches the decrypted first account information, permit the first memory system to access the memory system.
4 . The memory system according to claim 1 , wherein
the controller is further configured to:
receive second data for requesting issuance of the first account information from the first memory system; and
transmit third data including the first account information to the first memory system in accordance with the second data.
5 . The memory system according to claim 4 , wherein
the controller is further configured to:
receive second signature data for the second data from the first memory system; and
when authenticity of the second data is confirmed using the second signature data, transmit the third data including the first account information which is encrypted and third signature data for the third data to the first memory system in accordance with the second data.
6 . The memory system according to claim 1 , wherein
the controller is further configured to:
receive, from the first memory system, fourth data for requesting a change of the first account, fifth data including the second account information, and sixth data including third account information to be newly used for authentication of the first account; and
when the second account information matches the first account information, transmit seventh data including the third account information to the first memory system in accordance with the fourth data.
7 . The memory system according to claim 6 , wherein
the controller is further configured to:
store the first account information, which is encrypted, in the memory system;
receive, from the first memory system, the fourth data, the fifth data including the second account information that is encrypted, the sixth data including the third account information which is encrypted, and fourth signature data for the fourth data, the fifth data, and the sixth data;
when authenticity of the fourth data, the fifth data, and the sixth data is confirmed using the fourth signature data, decrypt the encrypted second account information included in the fifth data and decrypt the encrypted first account information; and
when the decrypted second account information matches the decrypted first account information, transmit the seventh data including the third account information that is encrypted and fifth signature data for the seventh data to the first memory system in accordance with the fourth data.
8 . The memory system according to claim 1 , wherein
the controller is further configured to:
communicate with a host device via a second interface that conforms to a second standard different from the first standard; and
receive the first data from the first memory system via the host device.
9 . The memory system according to claim 1 , wherein
a host device is configured to access the memory system via the first memory system.
10 . A memory system comprising:
a memory configured to store first account information; and
a controller coupled to the memory and connectable to a network via a first interface, wherein
the memory system is configured to:
communicate with a first memory system via the first interface through the network, the first interface conforming to a first standard;
manage the first account information to be used for authentication of a first account; and
when first data associated with second account information is issued from the memory system, determine a permission to access data stored in the memory, based on a result of a comparison between the first account information and the second account information.
11 . The memory system according to claim 10 , wherein
the first data associated with the second account information is encrypted.
12 . The memory system according to claim 10 , wherein
a key is stored in the memory.
13 . The memory system according to claim 12 , wherein
the key is a secret key and/or a public key.
14 . The memory system according to claim 10 , wherein
the memory system includes both a network interface and a host interface, and
the first interface is the network interface.
15 . A control method of a memory system, the memory system comprising a memory configured to store first account information and a controller coupled to the memory and connectable to a network via a first interface,
the method comprising:
communicating with a first memory system via the first interface through the network, the first interface conforming to a first standard;
managing the first account information to be used for authentication of a first account; and
when first data associated with second account information is issued from the memory system, determining a permission to access data stored in the memory based on a result of a comparison between the first account information and the second account information.