Storage system in which fictitious information is prevented
According to one embodiment, a storage system includes a host device, a secure storing medium, and a non-secure storing medium. The secure storing medium includes a memory provided with a protected first storing region which stores secret information sent from the host device, and a second storing region which stores encoded contents, and a controller which carries out authentication processing for accessing the first storing region. The host device and the secure storing medium produce a bus key which is shared only by the host device and the secure storing medium by authentication processing, and which is used for encoding processing when information of the first storing region is sent and received between the host device and the secure storing medium. The host device has the capability to request the secure storing medium to send a status.
1. A storage system comprising:
a host device;
a secure storing medium including:
a memory provided with a protected first storing region which stores secret information sent from the host device, and a second storing region which stores encoded contents; and
a controller configured to carry out authentication processing for accessing the first storing region, wherein
the host device and the secure storing medium produce a bus key which is shared only by the host device and the secure storing medium by authentication processing, and which is used for encoding processing when information of the first storing region is sent and received between the host device and the secure storing medium,
the host device has the capability to request the secure storing medium to send a status,
the secure storing medium produces a message authentication code based on the bus key in reply to the sending request of the status, and
the host device verifies validity of the message authentication code based on the bus key.
2. The system according to claim 1 , wherein
the host device issues an initializing request to the secure storing medium, and
the secure storing medium abandons the bus key based on the initializing request.
3. The system according to claim 2 , wherein
a non-secure storing medium connected to at least one of the host device, and including a third storing region which stores encoded contents.
4. A storage system comprising:
a host device;
a secure storing medium including:
a memory provided with a protected first storing region which stores secret information sent from the host device, and a second storing region which stores encoded contents; and
a controller which carries out authentication processing for accessing the first storing region; and
a non-secure storing medium which is connected to at least one of the host device and the secure storing medium, and which records encoded contents, wherein
the controller of the secure storing medium includes a first identifier, the memory includes a second identifier, and the non-secure storing medium includes a third identifier, and
the host device identifies the secure storing medium and the non-secure storing medium based on the first, second and third identifiers.
5. The system according to claim 4 , wherein
when the non-secure storing medium does not include the third identifier, the host device produces a fourth identifier, and supplies the fourth identifier to the non-secure storing medium.
6. The system according to claim 5 , wherein
at least one of the secure storing medium and the non-secure storing medium includes link information indicative of a relation between the non-secure storing medium and the secure storing medium, and
the link information of the secure storing medium includes at least one of the third and fourth identifiers of the non-secure storing medium.
7. The system according to claim 6 , wherein
the memory of the secure storing medium includes a medium ID, and
the link information of the non-secure storing medium includes the medium ID of the secure storing medium.