Data storage device with a variable computer file system

Abstract

The present invention relates to a data storage device with a variable computer file system, which utilizes the concept of dedicated sub-file systems that are activated or deactivated based on authentication authorization. Each dedicated sub-file system is activated or deactivated based on authentication authorization and is recognized by a host computer. A deactivated dedicated sub-file system cannot be recognized or accessed by the host computer. Therefore, security is significantly enhanced because a third party accessing the host computer cannot access the dedicated sub-file system without a means to activate the dedicated sub-file system.

Description

Technical Field

[0001] The present invention relates to a data storage device and a computer file system. Background Art

[0002] Based on computer architecture, the file system is generally considered to be part of the operating system (OS) and affects all computer components, such as applications. Furthermore, the file system is the computer's basic framework for storing and managing data and files containing user or company data. Therefore, for security reasons, file system management is very important in computers.

[0003] In a conventional computer, an OS and a file system are recorded in a data storage device (or auxiliary storage device) consisting of a solid-state drive (SSD), a non-volatile memory such as non-volatile memory express (NVMe), or a mechanical storage device such as a hard disk drive (HDD), and at startup, a boot loader (e.g., a basic input / output system (BIOS) in a personal computer (PC)) reads the OS code and data from the data storage device and executes the operating system code in the computer to complete preparation for use. Meanwhile, in a distributed computer architecture using a remote file system, such as a network computer, a computer and network-attached storage (NAS), or a cloud consisting of a service terminal and a server, a file system is remotely provided to a computer through a communication network.

[0004] However, considering the usage examples of such a file system, it can be seen that the file system structure simply consists of a computer and a data storage device in which the OS code and the file system are stored. Therefore, the file system of a computer is generally operated according to the operating OS, and one file system corresponding to the OS is operated in one operating OS.

[0005] Depending on the application, a single computer can be configured to use multiple types of OS. For example, in a PC, the user specifies a boot partition in the BIOS. By configuring one partition for the Windows OS file system and another for the Linux OS file system, Windows and Linux can be used together, allowing the PC to boot with the desired OS. However, once the boot is complete, the file system controlled by one OS becomes the file system of the corresponding computer.

[0006] Meanwhile, after the OS finishes booting, when the PC is ready for use, user authentication is generally performed. Basically, the widely used user authentication method utilizes identification (ID) and passwords, which have recently evolved into hardware fingerprint recognition or ID card authentication.

[0007] After booting, the operating system and security software are responsible for file system security. Most operating systems provide a certain degree of security by employing a method that allows each user to have different access rights to system resources, including the file system. A simple security measure to prevent screen exposure is also provided by temporarily locking the screen. Companies and public institutions also use security software that monitors the copying, distributing, or printing of files.

[0008] However, these various security methods are meaningless if an unauthorized user or program accesses the computer and becomes an OS administrator due to malware infection, ID or password leakage, or ID loss. For example, maintaining security by locking the screen or automatically logging out when the user's keyboard or mouse is inactive for a certain period of time will not actually function as a security function in the event of malware infection or ID or password leakage.

[0009] Even worse, in the case of an unprotected leak, there are various ways to bypass or disable installed security software, and even when file contents are leaked, copied, printed, etc., the user cannot inspect the contents of the file, so it is almost as if security has been effectively compromised. Even if the file is deleted, it is not easy to recover from the damage, as the user will only know that the file has been deleted when they need it.

[0010] In such a situation in an existing computer, the entire file system of the corresponding user can be accessed without any major restrictions, so security is greatly reduced. Therefore, even when the user is authenticated as an administrator of the host computer, the user may be a third party or a hacker program that is not the real user. Therefore, it is very important to control user access to the file system by adding security devices and methods to the existing file system. Summary of the Invention

[0011] Technical issues

[0012] Conventional computers use a file system managed and controlled by an operating system (OS), and security is provided by granting different permissions to each user. However, if someone with administrator privileges accesses the computer without permission, the computer is left defenseless. This is because all OS program code, including that for managing the file system, is actually executed by the host's central processing unit (CPU), with peripheral devices including data storage devices passively supporting the host. Conventional computers must be implemented in such a way that security programs are executed by the host's CPU, making it impossible to avoid the aforementioned problems.

[0013] Therefore, even when a user is authenticated as an administrator of a host computer, the user still requires additional authentication and can only use the file system that is variably configured based on the authentication operation. In situations where it is necessary to manage the entire file system, security can be significantly enhanced when the data storage device utilizes the security functions provided when partially managing the file system. Therefore, an object of the present invention is to improve the security vulnerabilities of existing computer file systems.

[0014] Technical Solution

[0015] In order to solve the above problems, the inventors designed the concept of a dedicated sub-file system that is separated from the file system of the operating system (OS) and managed separately by a data storage device, and used this concept to propose a data storage device with a variable computer file system that is activated or deactivated depending on whether the authentication is passed.

[0016] Each dedicated sub-file system is activated or deactivated based on whether the user passes authentication. A deactivated dedicated sub-file system cannot be identified or accessed by the host. Therefore, unless the dedicated sub-file system is activated, third parties attempting to access the host cannot access the dedicated sub-file system, significantly enhancing security.

[0017] A dedicated sub-file system can be a file, a directory, or a partition, or a combination thereof. In addition, a dedicated sub-file system can be represented as a combination of file system objects that satisfy the attributes provided by the file system and various other conditions.

[0018] By adopting the variable computer file system according to the present invention, a data storage device, a network-attached storage (NAS), a file server, etc. that provides data to a host can perform an access information analysis operation and can deny a request to access an object belonging to a deactivated dedicated sub-file system or provide false information to protect themselves. In addition, they can periodically check whether authentication is passed, thereby only providing the host with file system configuration information, such as an active master file table (MFT) or an active file allocation table (FAT), from which file system objects belonging to the deactivated dedicated sub-file system and information of the file system objects contained therein are deleted.

[0019] While existing computer operating systems distinguish between users, a single administrator essentially controls the entire file system structure. This inherently creates security vulnerabilities. Existing computer operating systems manage data storage devices as passive devices, freely accessing all storage space within them. This storage space is typically managed as the host's file system.

[0020] In contrast, the variable computer file system of the present invention includes a deactivated dedicated sub-file system, which is a storage space independently managed by the data storage device and cannot be conditionally identified or accessed by the host. A dedicated sub-file system can only be activated and recognized and accessed by the host after passing authentication. The variable computer file system of the present invention can have multiple dedicated sub-file systems. In this case, each dedicated sub-file system can specify its own user and set its own authentication method. In some cases, multiple users and multiple authentication methods can be provided. A dedicated sub-file system without a specified user or authentication method can be configured to be considered deactivated and allowed access without any restrictions.

[0021] Configuration and management operations for a dedicated sub-file system, such as user specifications and authentication methods, are performed on a data storage device, NAS, file server, or the like, where the host's file system is stored. In the case of a PC, when the data storage device where the file system is stored is operated in a management mode independent of the operating system, the user can configure a dedicated sub-file system and store the configuration information in a separate space within the data storage device. The dedicated sub-file system can include files or directories, as well as specific sectors or clusters of the storage device.

[0022] Meanwhile, the data storage device with a variable computer file system according to the present invention activates or deactivates a dedicated sub-file system by checking whether authentication has been passed. In this case, all file system objects except the deactivated file system are presented to the host as the active file system. Therefore, when the data storage device according to the present invention receives a request from the host to provide information about file system objects, it analyzes the requested information, checks whether the request relates to the storage space of an activated dedicated sub-file system, and then responds to the host's request to provide the information. On the other hand, if the request relates to the storage space of a deactivated dedicated sub-file system, the data storage device denies the provision of the information or responds that the request is unauthenticated. In the case of Windows, if the information provision is denied, a program for checking the data storage device, such as "chkdsk," can be automatically executed in some cases. Alternatively, methods such as disabling this function using a patch or providing false information can be considered. Through this process, file system objects belonging to the dedicated sub-file system can be hidden and protected.

[0023] Therefore, the data storage device having a variable computer file system according to the present invention can variably provide a plurality of pieces of information to the host computer, which comprehensively display the status of file system objects such as the FAT and MFT. The data storage device according to the present invention manages the FAT or MFT of the entire file system itself, and only provides the host computer with the active FAT or active MFT, which is configured in addition to the file system objects belonging to the deactivated dedicated sub-file system, and information about the file system objects contained therein. In this case, by using a protection method such as marking bad sectors or bad clusters, the storage space occupied by the file system objects of the dedicated sub-file system is prevented from being overwritten by the OS.

[0024] As described above, by employing the variable computer file system, data storage device, network-attached storage (NAS), file server, etc. according to the present invention, data provided to a host can be analyzed for access information and can deny access requests to objects belonging to a deactivated dedicated sub-file system, or provide false information to protect itself. Furthermore, the host can be checked for authentication and only the active master file table (MFT) or active file allocation table (FAT) can be provided to the host, from which file system objects belonging to the deactivated dedicated sub-file system, as well as information about the file system objects included therein, have been deleted. In this case, the dedicated sub-file system can be a file, a directory, or a partition, or a combination thereof. Furthermore, the dedicated sub-file system can be represented as a combination of file system objects that satisfy attributes provided by the file system and various other conditions.

[0025] For example, a dedicated sub-file system may be a single partition, file, or directory, such as "d:," "d: / WORLD," or "d: / WORLD / KOREA.doc," or may be represented as a combination thereof. Furthermore, a dedicated sub-file system may be represented as a combination of all files in drive d:, with "ppt" as the extension, such as "d: / / *.ppt." Furthermore, a dedicated sub-file system may be a combination of all files created within a specific time period, such as the time period "January 1, 2018 to December 31, 2018 (FILE01 / JAN / 2018to 31 / DEC / 2018)." Furthermore, a dedicated sub-file system may also be a combination of all files including "my," such as "*my*.*." Furthermore, a dedicated sub-file system may be represented as various combinations of file attributes provided for existing computer file systems.

[0026] User authentication can also be performed using the input / output devices of a data storage device, a NAS, or a file server. Alternatively, any device connected to one of these devices via wired or wireless communication can be used as an authentication device. For example, a device carried by the user, such as a mobile phone or tablet, can be used as an authentication device.

[0027] In this case, if a wireless communication network with a limited communication range is used, such as Bluetooth or wireless Internet, the user can be automatically authenticated when the user device (i.e., mobile phone, tablet computer, etc.) is within the communication distance of the device using the variable computer file system of the present invention, and authentication can be automatically blocked when the user is outside the communication distance, the communication is disconnected, or the sensitivity is reduced.

[0028] The data storage device of the present invention, implemented and completed through the above-mentioned principles, may include a host interface unit for communicating with a host, a data storage unit configured to store data, a user interface unit configured to receive user input and display or transmit information to be provided to the user, and a control unit, which is connected to the host interface unit, the data storage unit and the user interface unit, and is configured to control the operation mode of the data storage device or activate or deactivate a dedicated sub-file system according to whether the user authentication is passed, so as to provide the dedicated sub-file system to the host as an active file system and manage it.

[0029] The data storage device controlled by the control unit can operate in normal mode and management mode. A user can select normal mode or management mode using the input function of the user interface unit. In management mode, the data storage device receives configuration information for a dedicated sub-file system from the user and stores the configuration information in a database (DB) for the dedicated sub-file system. In normal mode, the data storage device checks the DB for the dedicated sub-file system, activates or deactivates the corresponding dedicated sub-file system based on whether authentication is successful, and configures an active file system reflecting the activation or deactivation in response to an access request from the host. In this case, user authentication is performed using the authentication method employed by each dedicated sub-file system.

[0030] The control unit can be implemented as a central processing unit (CPU) for controlling data storage devices, software and related hardware. The user interface unit can be implemented as a combination of user-operable electrical switches, keyboards, display devices and programs associated therewith. Alternatively, the user interface unit can be implemented by a communication module and an external terminal, which provides information to the user or receives information from the user in a wired or wireless manner. In this case, the user input / output device can be basically replaced by an external terminal such as a mobile phone.

[0031] The control unit may include a first file system management module configured to perform a management operation of receiving setting information of the dedicated sub-file system from a user and storing or deleting the setting information in a management mode.

[0032] In addition, the control unit may include a second file system management module configured to provide the host with a dedicated sub-file system that is activated only in a management mode, to allow a user to execute a management program contained in the dedicated sub-file system on the host, to receive setting information of the dedicated sub-file system from the user, and to store and manage the setting information in a DB of the dedicated sub-file system.

[0033] In addition, the control unit may further include a file system configuration module and a file system protection module. Preferably, the file system configuration module may be executed periodically, and the file system protection module may be executed upon receiving an access request from the host. The file system configuration module may receive and operate on interrupt signals related to changes in the authentication environment from the user interface unit.

[0034] The file system configuration module may include an authentication analyzer configured to check whether authentication of each dedicated sub file system registered in the DB of the dedicated sub file system is passed, an authentication applier configured to form an active file system including dedicated sub file systems for which authentication is checked, and a protection target recorder configured to generate a protection target map for protecting dedicated sub file systems for which authentication is not checked.

[0035] In this case, the authentication applier of the file system configuration module may include a first new object processor configured to automatically manage the corresponding object in the form of deactivation or activation according to rules set by the user when a file system object belonging to the deactivated dedicated sub-file system is newly formed, or to determine the management method according to a user command obtained through the user interface unit.

[0036] Furthermore, the authentication applicator of the file system configuration module may include a second new object processor, which is configured to check whether there is an inactive file system object with the same name in the corresponding directory when a new file system object is formed. When it is confirmed that there is an inactive file system object with the same name, the name of the inactive file system object is changed and the inactive file system object is managed.

[0037] The file system protection module may include an access information analyzer configured to analyze access information provided by the host, a protection target checker configured to check whether the storage space of the access address contained in the access information exists in the protection target map, and a protection executor configured to selectively perform protection operations in the case of a protection target, such as denying access to the access address, providing false information, etc., and in the absence of a protection target, perform a specified operation according to the access request of the host.

[0038] Meanwhile, when the data storage device of the present invention supports multiple users, such as NAS, the file system is different from the user, so the file system configuration module and the file system protection module are restricted to execute within the file system of the corresponding user.

[0039] In this case, the protection executor of the file system protection module may additionally have the function of notifying the user through the user interface unit that the protection operation has been performed, or have the function of leaving a log record related thereto, wherein the function can be implemented in conjunction with an external terminal device, such as the user's mobile phone.

[0040] Technical Effects

[0041] Existing computer systems are responsible for the security of the OS's file system and security software. However, if the OS administrator can control the entire system, security is significantly limited. Specifically, if a malicious third party becomes an administrator, they can use various methods, such as using OS control functions to bypass or disable installed security software, thereby allowing them to view, copy, and print files, completely compromising security. Therefore, even if an administrator user accesses the host computer, that user could be a third party or a hacker program, not the real user. Therefore, by adding additional security devices and methods to control access to the existing file system, file system security can be significantly enhanced.

[0042] The present invention designs a variable computer file system with a dedicated sub-file system that is activated or deactivated based on authentication success, and applies it to a data storage device. Consequently, since the dedicated sub-file system cannot be identified by the host computer after deactivation, malicious third parties or programs cannot determine which files exist on the user's computer, significantly enhancing security. Similarly, in the present invention, this functionality is implemented in the data storage device that stores the OS's file system information, or in network-attached storage (NAS) or a server that controls the data storage device, rather than in the host computer running the OS, thereby separating the functionality from the host's OS. Consequently, the security of existing computer systems can be steadily improved.

[0043] Therefore, since the variable computer file system designed according to the present invention is implemented in a data storage device that stores the file system information of the OS, or in a NAS or a server that controls the data storage device, rather than in a host running the OS, security functions independent of the host OS can be obtained, thereby reliably and effectively protecting the computer's file system. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 This is a conceptual diagram of the present invention.

[0045] Figure 2 It is a configuration diagram of a data storage device (10) embodying the concept of the present invention.

[0046] Figure 3 It is a configuration diagram of the user interface unit.

[0047] Figure 4 This is a configuration diagram of the control unit.

[0048] Figure 5 This is a configuration diagram of the authentication application.

[0049] Figure 6 This is an exemplary configuration diagram of a dedicated sub-file system. DETAILED DESCRIPTION

[0050] The advantages and features of the present invention and the methods for implementing the present invention will be clearly understood with reference to the accompanying drawings and the following detailed examples. However, the present invention is not limited to the embodiments to be disclosed below and can be implemented in various different forms. The following examples are provided solely to fully inform those skilled in the art of the scope of the present invention. The scope of the present invention is defined by the appended claims.

[0051] Meanwhile, the terms used herein are only used to describe the embodiments of the present invention and are not intended to be limiting. In this specification, unless the context clearly indicates otherwise, the singular includes the plural. It should be understood that the terms "comprise" and / or "include" used herein specify some components, steps, operations and / or elements, but do not exclude the presence or addition of one or more other components, steps, operations and / or elements.

[0052] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In this specification, when reference numerals are assigned to components of each drawing, it should be noted that when the same components are shown in different drawings, the same numerals are assigned to the same components as much as possible. In addition, in the description of the present invention, when it is determined that the detailed description of the relevant well-known configuration or function unnecessarily obscures the main points of the present invention, its detailed description will be omitted.

[0053] Figure 1 This is a conceptual diagram of the present invention, illustrating the concept of a data storage device 10 employing a dedicated sub-file system 100 that is activated or deactivated based on authentication success, i.e., a mutable computer file system. Here, when dedicated sub-file system 100 in data storage device 10 is deactivated, host 1 cannot recognize dedicated sub-file system 100. This functionality can be implemented in a data storage device that stores file system information for an operating system (OS), or in a network-attached storage (NAS) or file server that controls the data storage device, rather than in a host running an OS, thereby separating the functionality from the host OS.

[0054] The present invention differs significantly from conventional computers, where the entire file system is managed by allocating different storage areas to each user account. While administrators can always see the entire file system, and the file system remains under the control of the operating system (OS), the present invention's variable computer file system limits the full control afforded by conventional computer file systems, shifts some control to the data storage device (or another entity that manages the data storage device), and adds authentication functionality. Consequently, security is significantly enhanced. Specifically, the present invention incorporates new functions that the computer's OS cannot control, designed to execute on hardware other than the hardware running the computer's OS.

[0055] Looking back at conventional technology, hiding a portion of the file system's functionality is a method that has been used in computers for a long time. Some commercial computers use a method in which, instead of using a password, a user's mobile phone is registered, and then when the mobile phone is not nearby (i.e., not authenticated), the use of the computer is disabled by making the connected hard disk drive (HDD) unrecognizable.

[0056] However, since the function of hiding files is a simple method of setting the attributes of the files or directories to be hidden and is executed under the control of the OS, the administrator of the corresponding computer can change the attributes at any time to expose the corresponding file system objects. In addition, in the case where a mobile phone or other authentication device is used to authenticate the use of a computer or data storage device, it is a simple technology that is only used to determine whether the corresponding computer or data storage device can be used. Therefore, when the login is completed, the entire file system comes under the control of the OS. However, in the present invention, the file system of the OS is independently managed by the data storage device, and a dedicated sub-file system 100 is provided that is activated, deactivated, and hidden according to whether the authentication is passed, so that the file system is protected, thereby differing from the conventional technology in structure and effect.

[0057] To this end, the present invention introduces the concept of a dedicated sub-file system. Each dedicated sub-file system 100 is activated or deactivated based on authentication success and is recognized by the host 1. A deactivated dedicated sub-file system 100 cannot be recognized or accessed by the host 1. Therefore, a third party accessing the host 1 cannot access the dedicated sub-file system 100 unless they have a method to activate the dedicated sub-file system 100, significantly enhancing security.

[0058] Here, the dedicated sub-file system 100 is a file, directory or partition itself, or is represented as a combination thereof. In addition, the dedicated sub-file system 100 can be represented as a combination of file system objects that meet the attributes provided by the file system and meet various other conditions.

[0059] Meanwhile, existing computer operating systems distinguish between users, but essentially a single administrator controls the entire file system structure, leading to multiple security vulnerabilities. Furthermore, existing computer operating systems manage data storage devices as passive devices, freely accessing all storage space within them. Storage space is typically managed as the host's file system.

[0060] In contrast, the data storage device 10 with a variable computer file system of the present invention includes a deactivated dedicated sub-file system 100, which is a storage space that cannot be conditionally identified and accessed by the host 1. Dedicated sub-file system 100 is activated only when authentication is successful, and can be identified and accessed by the host 1. The variable computer file system of the present invention can have multiple dedicated sub-file systems 100. In this case, each dedicated sub-file system 100 can specify its user and set its authentication method. In some cases, multiple users and multiple authentication methods can be provided. A dedicated sub-file system 100 that does not specify a user or authentication method can be configured to be deactivated and allowed access without any restrictions.

[0061] Configuration and management operations of the dedicated sub-file system 100, such as user specifications and authentication methods, are performed on a data storage device, NAS, file server, or the like in which the file system of the host 1 is stored. In the case of a PC, when the data storage device in which the file system is stored is operated in a management mode independent of the OS, the user can configure the dedicated sub-file system 100 and store information about the configuration in a separate space in the data storage device 10.

[0062] At the same time, the data storage device 10 having the variable computer file system according to the present invention activates or deactivates the dedicated sub-file system 100 by checking whether the authentication is passed. In this case, except for the deactivated file system, the remaining file system objects are configured as active file systems and provided to the host 1.

[0063] Therefore, when data storage device 10 receives a request from host 1 to provide file system object information, it analyzes the requested information, checks whether the request relates to storage space in the activated dedicated sub-file system 100, and then responds to host 1's request to provide the information. On the other hand, if the request is determined to relate to storage space in the deactivated dedicated sub-file system 100, data storage device 10 denies the information provision or responds that the request is unauthenticated. In the case of Windows, when information provision is denied, a data storage device check program, such as "chkdsk," can be automatically executed in some cases. Therefore, methods such as disabling this function using a patch or providing false information are also possible. Through the above process, file system objects belonging to dedicated sub-file system 100 are hidden and protected.

[0064] Therefore, the data storage device 10 having a variable computer file system according to the present invention variably provides a plurality of pieces of information to the host 1, which comprehensively display the status of file system objects such as the file allocation table (FAT) and the master file table (MFT). The data storage device 10 according to the present invention manages the FAT or MFT of the entire file system itself and provides only the active FAT or active MFT to the host 1, which is configured with the exception of the file system objects belonging to the deactivated dedicated sub-file system 100, and information about the file system objects contained therein. In this case, by using a protection method such as marking bad sectors or bad clusters, the storage space occupied by the file system objects of the dedicated sub-file system 100 is prevented from being overwritten by the OS.

[0065] As described above, by adopting the variable computer file system, data storage device, network attached storage, file server, etc. according to the present invention, data provided to the host 1 is protected by performing an access information analysis operation to deny access requests to objects belonging to the deactivated dedicated sub-file system 100, or providing false information; and by checking whether the authentication is passed, only the active MFT or active FAT, in which the file system objects belonging to the deactivated dedicated sub-file system 100 are deleted, and information about the file system objects included therein are provided to the host 1.

[0066] Here, the dedicated sub-file system 100 is a file, directory or partition itself, or represents a combination thereof. In addition, the dedicated sub-file system 100 can be represented as a combination of file system objects that meet the attributes provided by the file system and various other conditions.

[0067] For example, the dedicated sub-file system 100 can be a single partition, file, or directory, such as "d:," "d: / WORLD," or "d: / WORLD / KOREA.doc," or can be represented as a combination thereof. Furthermore, the dedicated sub-file system 100 can be represented as a combination of all files in drive d:, with a ppt extension, such as "d:*.ppt." Furthermore, the dedicated sub-file system 100 can be a combination of all files created within a specific time period, such as the period from January 1, 2018, to December 31, 2018. Furthermore, the dedicated sub-file system 100 can also be a combination of all files including "my," such as "*my*.*." Furthermore, the dedicated sub-file system 100 can be represented as various combinations of file attributes provided by existing computer file systems.

[0068] At the same time, user authentication can be performed using the input / output device of the data storage device, NAS or file server. Further, any device connected to one of these devices via wired / wireless communication can also be used as an authentication device. For example, a device carried by the user, such as a mobile phone, tablet computer, etc., can be used as an authentication device. In this case, by using a wireless communication network with a limited transmission and reception distance, such as Bluetooth or wireless Internet, when the user has a mobile phone, tablet computer, etc., within a certain distance from the device with a variable computer file system of the present invention, communication is possible and the user is automatically authenticated. When the user is outside a certain distance, the communication is disconnected or the communication sensitivity is reduced to below the set level, and the authentication is automatically blocked.

[0069] Figure 2 The configuration of a data storage device 10 embodying the above-described concept is shown.

[0070] The data storage device 10 of the present invention includes a host interface unit 300 for communicating with a host 1, a data storage unit 200 configured to store data, a user interface unit 400 configured to receive user input or display or transmit information to be provided to the user, and a control unit 500, which is connected to the host interface unit 300, the data storage unit 200 and the user interface unit 400, and is configured to control the operation mode of the data storage device 10, or is configured to activate or deactivate the dedicated sub-file system 100 according to whether the user authentication is passed, so as to provide the dedicated sub-file system 100 as an active file system to the host 1 and manage it.

[0071] The operating modes of the data storage device 10, controlled by the control unit 500, include a normal mode and a management mode. A user can select the normal mode or the management mode using the input function of the user interface unit 400. In the management mode, the data storage device 10 receives the setting information of the dedicated sub-file system 100 from the user and stores the setting information in a database (DB) 600 of the dedicated sub-file system 100 or in a database 600 connected to the dedicated sub-file system 100. In the normal mode, the data storage device 10 checks the DB 600, activates or deactivates the corresponding dedicated sub-file system 100 depending on whether authentication is successful, and configures an active file system reflecting the activation or deactivation in response to a request from the host 1 to access the device. In this case, user authentication is performed based on the user and authentication method registered for each dedicated sub-file system 100.

[0072] In the central processing unit (CPU) for controlling the data storage device 10, the control unit 500 can be implemented as software and related hardware, and the user interface unit 400 can be implemented as an electric switch, a keyboard and a display device, which are operated by the user, or as a program related thereto. Alternatively, the user interface unit 400 can be implemented in a manner consisting of a communication module and an external terminal, and provide information to the user or receive information based on information transmitted in a wired or wireless manner. In this case, the user input / output device can be basically replaced by the input / output device of the external terminal, such as a mobile phone.

[0073] The control unit 500 includes a first file system management module 530 configured to perform management operations of receiving setting information of the dedicated sub-file system 100 from a user and storing or deleting the setting information in a management mode.

[0074] Furthermore, the control unit 500 includes a second file system management module 540 configured to provide the host 1 with a management-mode dedicated sub-file system 100 that is activated only in the management mode so as to allow the user to execute a management program contained in the management-mode dedicated sub-file system 100 on the host, receive setting information of the dedicated sub-file system 100 from the user, and store and manage the setting information in the DB 600 of the dedicated sub-file system.

[0075] Figure 4 The configuration of the control unit 500 is shown.

[0076] The control unit 500 includes a file system configuration module 510 and a file system protection module 520. The file system configuration module 510 may be executed periodically, and the file system protection module 520 is executed upon receiving an access request from the host 1. The file system configuration module 510 receives and executes an interrupt signal related to a change in the authentication environment from the user interface unit 400.

[0077] The file system configuration module 510 may include an authentication analyzer 511 configured to check whether the authentication of each dedicated sub file system 100 registered in the DB 600 of the dedicated sub file system 100 or in the DB 600 connected to the dedicated sub file system 100 is passed, an authentication applier 512 configured to form an active file system including the dedicated sub file systems 100 whose authentication is checked, and a protection target recorder 513 configured to generate and store a protection target map for protecting the dedicated sub file systems 100 whose authentication is not checked.

[0078] Here, reference Figure 5Authentication applier 512 may include a first new object handler 5121 configured to, when a new file system object belonging to a deactivated dedicated sub-file system 100 is newly formed, automatically manage the corresponding object in a deactivated or activated form according to user-set rules, or determine a management method based on a user command obtained through the user interface unit. Furthermore, authentication applier 512 may also include a second new object handler 5122 configured to, when a new file system object is newly formed, check whether an inactive file system object with the same name exists in the corresponding directory; if an inactive file system object with the same name exists, change the name of the inactive file system object, and manage the inactive file system object.

[0079] At the same time, the file system protection module 520 may include an access information analyzer 521, configured to analyze the access information provided by the host 1, a protection target checker 522, configured to check whether the storage space of the access address contained in the access information exists in the protection target map, and a protection executor 523, configured to selectively perform protection operations in the case of a protection target, such as denying access to the access address, providing false information, etc., and, on the other hand, perform specified operations according to the access request of the host 1 in the absence of a protection target.

[0080] Meanwhile, when the data storage device 10 of the present invention supports multiple users, such as a NAS, the file system differs for each user, and thus the file system configuration module 510 and the file system protection module 520 are restricted to executing within the file system of the corresponding user. In this case, the protection executor 523 of the file system protection module 520 may additionally have the function of notifying the user through the user interface unit 400 that a protection operation has been executed, or the function of leaving a log record related thereto, wherein these functions may be implemented in conjunction with an external terminal device, such as a user's mobile phone.

[0081] Hereinafter, an exemplary operation of the dedicated sub file system 100 will be described.

[0082] Figure 6 FIG. 6 shows an exemplary configuration of a dedicated sub-file system DB 600. Figure 6 In the DB construction of , assume that two users U_AA and U_BB use a PC. First, user U_AA specifies a directory D: / AA, all files with the ppt extension, and all files and directories with the word "my" in the file name in his / her file system as a dedicated sub-file system SFS (in Figure 6Therefore, when user U_AA logs in, the data storage device 10 should provide the three dedicated sub-file systems of user U_AA to the host 1. However, this is only possible if the authentication conditions specified by the user ( Figure 6 The three dedicated sub-file systems are provided to the host 1 only when the authentication condition is "CERTIFICATION" in the above text. In the case of authentication using the password PASSWORD_AA as an authentication condition, the active file system including the dedicated sub-file system "SFS D: / AA" is provided to the host 1. The password can be input through the user interface unit 400 of the data storage device 10 or through a mobile device connected thereto. As another authentication condition, the presence or absence of the user's mobile device (such as a mobile phone or tablet) can be used. Figure 6 In this example, when the user's mobile device MOBILE_AA is connected to the data storage device 10 via wired / wireless communication and passes a predetermined authentication process, a dedicated sub-file system "SFSFILE*.ppt" for files with a ppt extension is authenticated and then included in the active file system. At the same time, a dedicated sub-file system "SFS*my**," in which files and directories with the word "my" are designated, can be authenticated and then activated by one of the user's two mobile devices MOBILE_AA and MOBILE_CC.

[0083] Next, we will describe the three dedicated sub-file systems specified by user U_BB. Figure 6 In this example, user U_BB designates the files or directories belonging to D: / BB, files generated between March 1, 2019, and March 3, 2019, and files or directories belonging to C: / PROGRAM FILES / TREE as a dedicated sub-file system SFS in his / her entire file system. When authentication is completed using a hardware key device (USBKEY_BB) connected to a universal serial bus (USB) port, the dedicated sub-file system to which D: / BB belongs is activated and then included in the active file system. In this case, users U_AA and U_BB both use drive D:, and drive D: used by user U_AA and drive D: used by user U_BB are logically completely separate spaces. That is, drive D: used by user U_AA and drive D: used by user U_BB are recognized as drive D: in host 1 regardless of the physical implementation format. As in the other cases, when authentication is performed using the mobile device mobile_BB, which is the mobile device of the user U_BB, the dedicated sub-file system is activated, and when the dedicated sub-file system is deactivated, the use of applications stored in C: / program FILES / TREE is restricted.

[0084] Here, the CERTIFICATION conditions MOBILE_AA and MOBILE_BB mean that authentication is performed based on the presence or absence of a mobile phone, tablet computer, or another simple mobile device of the user (for example, a device implemented as a system chip in which wired / wireless communication devices, a CPU, etc. are integrated into one). When these devices are connected to the data storage device 10 through the user interface unit 400, these devices transmit their unique IDs to the data storage device 10 to notify its user of access or execute an application (e.g., app.) on the corresponding mobile device to send or receive information to or from the user. In this case, in addition to the unique ID, the mobile device and the hardware key can provide a series of information for encryption or decryption so that the information stored in the data storage device can be encrypted or decrypted.

[0085] At the same time, the file system configuration module 510 of the data storage device 10 of the present invention checks the connection status of the authentication device frequently or when the authentication environment changes. The connection status of the authentication device can be checked whenever the host 1 is accessed, or when the authentication environment changes, the connection status of the authentication device can be checked by receiving an interrupt signal from the user interface unit 400. However, in this case, performance may be degraded, so it is necessary to periodically check the authentication device. For example, assume that the authentication device is checked every five minutes. When checking the authentication device, the data storage device 10 generates an active file system including the dedicated sub-file system activated by the corresponding authentication device. Specifically, in the case of an OS such as Linux, the active FAT or active MFT is generated by excluding the deactivated dedicated sub-file system from the file system's FAT, or in the case of Windows, the MFT. In addition, to protect the content of the deactivated dedicated sub-file system, the space of the deactivated dedicated sub-file system should be marked as being in use. For example, the Windows OS performs a protection operation by marking the space used by the deactivated dedicated sub-file system as a bad sector or a used sector in the storage space status diagram used to determine whether the storage space is available. The active file system can be configured by reflecting the processing method of the newly generated file system object only when the identification device is the same as the authentication device of the identification check five minutes ago.

[0086] Therefore, although the active file system may actually be a subset of the entire file system, the OS or application of the host 1 regards the provided active file system as the entire file system and operates accordingly. Therefore, the host 1 cannot know the existence of files or directories belonging to the dedicated sub-file system 100 unless the dedicated sub-file system 100 is activated through user authentication.

[0087] Meanwhile, a user can generate an object belonging to a specific dedicated sub-file system 100 while the corresponding dedicated sub-file system 100 is deactivated. For example, in the above example, a PowerPoint file can be generated while the dedicated sub-file system [SFS*.ppt] is deactivated. In this case, the corresponding object is not completely generated but may be in the process of being generated. Therefore, the object can be managed by receiving instructions on how to handle the object from the user.

[0088] Therefore, these situations can be managed by displaying them on the user interface unit 400 or by reporting them to the user via a mobile device, such as a connected mobile phone. For example, when the file system configuration module 510 detects that a PPT file has been generated while the dedicated sub-file system "SFS*.ppt" is deactivated, the user is notified of the deactivation of the dedicated sub-file system "SFS*.ppt." The dedicated sub-file system "SFS*.ppt" is then activated by a command from the user, with the newly generated PPT file excluded from protection until the next login, or the dedicated sub-file system "SFS*.ppt" is deactivated by immediately applying protection. Alternatively, this information can be received as preset information and automatically processed according to the settings.

[0089] Next, it is also possible to manage situations where a generated file or directory has the same name as a file system object belonging to a deactivated dedicated sub-file system 100. The OS will not generate a file or directory with the same name in the same directory. For example, when a file named project.ppt already exists, the OS will ask the user whether to overwrite the file. However, in the data storage device with a variable computer file system of the present invention, since the OS cannot recognize deactivated and hidden files, when the dedicated sub-file system "SFS*.ppt" is deactivated, there is no problem for the OS to generate a file with the same name as project.ppt but different content. In this case, the data storage device with a variable computer file system of the present invention can respond by automatically changing the name of the automatically deactivated existing project.ppt file to another name that is uniquely identifiable in the corresponding directory (e.g., project_old0.ppt). Alternatively, the name of the corresponding file generated by the host 1 can be changed, but there is a disadvantage that the name of the hidden and protected file is exposed when the name of the corresponding file is changed.

[0090] At the same time, as described in the above example, when multiple users use the computer, a method is required to match the user logged into the host 1 with the user identified by the data storage device 10. Therefore, it is necessary to provide an additional device so that the host 1 itself can also recognize the mobile device or password, but this incurs additional costs.

[0091] However, since the data storage device 10 and the host 1 are already connected, the data storage device 10 may send the user identified by the data storage device 10 to the host 1 so that the user can be processed as logged in. That is, the host 1 inquires whether there is an authenticated user of the file system of the data storage device 10 in the login process, and when there is an authenticated user, the login process may be replaced with a method in which the data storage device 10 reads the user ID and / or password from the user interface unit 400 or a hardware key device or a mobile device connected to the user interface unit 400 and sends the user ID and / or password to the host 1.

[0092] Next, assume that multiple mobile authentication devices exist at the same time. When only one user can log into the computer at the same time, confusion may arise when both mobile devices MOBILE_AA and MOBILE_BB are recognized after logging in, as in the example above. However, this confusion can be easily resolved by only recognizing the mobile device of the user logging in for the first time. For example, when user U_AA logs in, only mobile devices MOBILE_AA and MOBILE_CC are recognized and can be authenticated, and even when mobile device MOBILE_BB is recognized, mobile device MOBILE_BB cannot be authenticated. Therefore, user U_AA should log out before user U_BB logs in.

[0093] However, when two or more user authentication devices are identified during the login process, it is necessary to organize the user authentication devices. In this case, the data storage device 10 transmits a message to all identified mobile devices to notify them of the presence of multiple users, and the mobile device that responds first is considered the mobile device of the logged-in user, thereby resolving this issue. Alternatively, this issue can be resolved by prioritizing users. That is, when user U_AA has a high priority among users U_AA and U_BB, this issue can be resolved by only identifying user U_BB after user U_AA abandons login.

[0094] Meanwhile, in a device such as a NAS or file server, multiple users can simultaneously use the data storage device 10 of the present invention. In this case, since the dedicated sub-file system DB 600 is different for each user, the data storage device 10 specifies the storage space based on the provided user information, and then, when the file system configuration module 510 and the file system protection module 520 are executed, the data storage device 10 provides the user's host 1 with an active file system that is different for each user.

[0095] The configuration of the present invention has been described in detail with reference to exemplary embodiments of the present invention. The above description of the present invention is merely exemplary, and those skilled in the art will appreciate that various modifications may be made without departing from the scope of the present invention and without changing the basic features. Therefore, the above embodiments should be considered in a descriptive sense only and not for the purpose of limitation. The scope of the present invention is defined not by the detailed description but by the appended claims, and includes all modifications or variations derived from the meaning, scope, and equivalents of the appended claims.

Claims

1. A data storage device having a variable computer file system, which is a data storage device connected to a host computer, the data storage device comprising: One or more dedicated sub-file systems separated from the host's operating system OS, including a database DB for storing configuration information, and activated or deactivated according to a result of determining whether the user is authenticated; a host interface unit configured to communicate with the host; a data storage unit configured to store data; a user interface unit configured to receive user input and transmit information to be provided to the user; as well as a control unit connected to the host interface unit, the data storage unit, and the user interface unit, configured to control an operation mode of the data storage device and activate or deactivate the dedicated sub-file system according to whether the user is authenticated; wherein the operation mode of the data storage device controlled by the control unit includes a normal mode and a management mode selected by the user using the user interface unit, Wherein, in the management mode, the data storage device receives setting information about the dedicated sub-file system from the user and stores the setting information in the DB of the dedicated sub-file system, and In the normal mode, the data storage device checks the DB of the dedicated sub-file system, activates or deactivates the corresponding dedicated sub-file system according to whether authentication is passed, and configures an active file system reflecting the activation or deactivation to respond to a request to access the host.

2. The data storage device according to claim 1, wherein When the authentication is passed, an active file system is configured using only the remaining file system objects except for the file system objects belonging to the deactivated dedicated sub-file system, and the active file system is provided to the host.

3. The data storage device according to claim 1, wherein The dedicated sub-file system is represented in a manner including at least one of a file, a directory, a group of files or directories defined by a phrase representing the file or directory, and a partition.

4. The data storage device according to claim 1, wherein When the data storage device receives a request from the host to provide information about a file system object, the data storage device analyzes the requested information, determines whether the request is related to a storage space of an activated dedicated sub-file system, and then responds to the host's request to provide the information, and When it is determined that the request is related to the storage space of the disabled dedicated sub-file system, the data storage device refuses to provide the information or responds that the request is an unauthorized request.

5. The data storage device according to claim 1, wherein The data storage device manages configuration information about the entire file system itself and provides the host with only configuration information of a portion of the file system except for the file system objects belonging to the deactivated dedicated sub-file system and information about the file system objects included therein. The data storage device according to claim 1 , wherein: User authentication is performed by at least one of the data storage apparatus, an input / output device or a file server of a network attached storage NAS, and a device connected to the data storage apparatus through wired / wireless communication.

7. The data storage device according to claim 1, wherein: The user interface unit is implemented as a combination of user-operable electrical switches, keyboards, display devices, and programs associated therewith.

8. The data storage device according to claim 1, wherein: The user interface unit is implemented in a manner of being composed of a communication module and an external terminal, and provides information to a user or receives information from a user based on information transmitted in a wired or wireless manner.

9. The data storage device according to claim 1, wherein: The control unit includes a first file system management module configured to perform management operations of receiving the setting information of the dedicated sub-file system from the user and storing or deleting the setting information in the management mode.

10. The data storage device according to claim 1, wherein: The control unit further includes a second file system management module configured to provide the host with a management-mode-specific sub-file system that is activated only in the management mode, thereby allowing the user to execute a management program contained in the management-mode-specific sub-file system on the host, receive setting information of the dedicated sub-file system from the user, and store and manage the setting information in the DB of the dedicated sub-file system.

11. The data storage device according to claim 1, wherein: The control unit includes a file system configuration module configured to form a file system, and a file system protection module configured to protect the file system, wherein the file system configuration module includes an authentication analyzer configured to check whether authentication of each dedicated sub-file system registered in the DB of the dedicated sub-file system is passed, an authentication applier configured to form an active file system including dedicated sub-file systems for which authentication is checked, and a protection target recorder configured to generate and store a protection target map for protecting dedicated sub-file systems for which authentication is not checked, and The file system protection module includes an access information analyzer configured to analyze access information provided by the host, a protection target checker configured to check whether the storage space of the access address contained in the access information exists in a protection target map, and a protection executor configured to selectively perform protection operations in the case of a protection target, and to perform specified operations according to the access request of the host in the absence of a protection target.

12. The data storage device according to claim 11, wherein: The authentication applier of the file system configuration module includes a first new object processor configured to automatically manage the corresponding object in a deactivated or activated form according to the rules set by the user when a new file system object belonging to the deactivated dedicated sub-file system is formed, and to determine a management method according to a user command obtained through the user interface unit.

13. The data storage device according to claim 11, wherein: The authentication applier of the file system configuration module includes a second new object processor, which is configured to check whether there is an inactive file system object with the same name in the corresponding directory when a new file system object belonging to the deactivated dedicated sub-file system is formed; when it is confirmed that the inactive file system object with the same name exists, change the name of the inactive file system object and manage the inactive file system object.

Images