Read-protected storage device with sequential logging
Instead of incorporating a single interface towards the host for transferring data, utilizing a designated write-only storage logging device. The write-only storage logging device can accept sequential streams and automatically overwrite. The controller will read the log material in a secure manner using a different and separate physical connection than the one used for write. The storage device may have LBA ranges that work as write-only as well as other LBA ranges, which are normal (both reads and writes are enabled). Both options will allow for a traditional file system as well as sharing the storage, but will still protect the log areas that would be used for events that should not be read out.
1. A data storage device, comprising:
a memory device, wherein the memory device comprises:
a first namespace accessible via a first interface; and
a second namespace accessible via a second interface, wherein the first namespace and the second namespace are distinct; and
a controller coupled to the memory device, wherein the controller is configured to:
receive a first request to write data to the memory device, wherein the first request is transmitted through the first interface;
write data to the memory device; and
receive a second request to read data from the memory device, wherein the second request is received through the second interface, and wherein the second interface is physically distinct from the first interface, and wherein the second namespace is a secure namespace that can only be read through requests transmitted through the second interface.
2. The data storage device of claim 1 , wherein the second interface and the first interface are physically distinct.
3. The data storage device of claim 1 , wherein the controller is configured to set first logical block addresses (LBAs) and second LBAs, wherein the first LBAs can be read from requests transmitted through the first interface, and wherein the second LBAs can be read only from requests transmitted through the second interface.
4. The data storage device of claim 1 , wherein the controller comprises a security validation module.
5. The data storage device of claim 4 , wherein the security validation module is coupled to the first interface and the second interface.
6. The data storage device of claim 5 , wherein read requests cannot be processed through the first interface.
7. The data storage device of claim 1 , wherein the controller is configured to perform authentication for requests through the second interface.
8. The data storage device of claim 1 , wherein the controller is configured to detect a connection established through the second interface.
9. The data storage device of claim 1 , wherein the first interface uses a host interface module (HIM) and the second interface uses a physical interface.
10. The data storage device of claim 9 , wherein the second interface is a secure interface module (SIM).
11. A data storage device, comprising:
a memory device, wherein the memory device comprises:
a first namespace accessible via a first interface; and
a second namespace accessible via a second interface, wherein the first namespace and the second namespace are distinct; and
a controller coupled to the memory device, wherein the controller comprises:
the first interface, wherein the first interface configured to receive commands to write data to the memory device; and
the second interface, wherein the second interface is configured to receive commands to read data from the memory device, wherein the first interface and the second interface are physically distinct, wherein the controller is configured to ignore read commands received through the first interface, wherein the second namespace can only be read through requests transmitted through the second interface.
12. The data storage device of claim 11 , wherein the controller includes a security validation module configured to validate read requests received, and wherein read requests are validated by the security validation module before accessing the second namespace.
13. The data storage device of claim 11 , wherein the controller is configured to receive instructions to enable or disable security parameters associated with accessing the memory device, wherein the instructions are configured to be received through the second interface and not the first interface.
14. The data storage device of claim 11 , wherein the controller is configured to receive power through the second interface.
15. The data storage device of claim 11 , wherein the controller is configured to have a first host device physically connected to the first interface and a second, distinct host device physically connected to the second interface while the first host device remains connected to the first interface.
16. A data storage device, comprising:
means to store data, wherein the means to store data comprises:
a first namespace accessible via a first interface; and
a second namespace accessible via a second interface, wherein the first namespace and the second namespace are distinct, and wherein the first interface and the second interface are physically distinct; and
a controller coupled to the means to store data, wherein the controller is configured to:
receive a request to read data from the means to store data;
determine that the data corresponding to the request is disposed in a restricted partition of the means to store data;
authenticate whether the request arrived via the first or the second interface, wherein the first interface is a interface through which commands to write the data to the means to store data are received;
determine that the request to read data disposed in the restricted partition was received via the second interface; and
read the data if the request to read data disposed in the restricted partition was received via the second interface.
17. The data storage device of claim 16 , wherein the controller is configured to restrict reads to non-restricted partitions of the means to store data such that reads to non-restricted partitions are requested through a different interface.
18. The data storage device of claim 16 , wherein the means to store data comprises a first namespace and a second namespace distinct from the first namespace, wherein the second namespace comprises the restricted partition of the means to store data.
19. The data storage device of claim 16 , wherein the controller is configured to receive a request to write data to the means to store data, wherein the request to write data is received through the first interface, and wherein the controller is configured to reject requests to read data received through the first interface.
20. The data storage device of claim 16 , wherein the controller is configured to define first logical block addresses (LBAs) as write only LBAs and second LBAs as read and write enabled LBAs.