Portable storage device

Abstract

To provide a portable storage device that ensures security without depending on an OS or applications on a PC side.SOLUTION: A USB memory 1 having a memory unit 12 and a USB I / F 13 having a connector 13a to be attached to a USB port 23a of a PC 2 includes: a wireless communication unit 14 that wirelessly communicates with the PC 2; a gate unit 16 that selects a connection between the memory unit 12 and the USB I / F 13; an authentication information storage unit 15 that stores authentication information; and a memory controller 11 that determines the authentication information and controls the gate unit 16. When detecting a connection between the PC 2 and the USB memory 1, the memory controller 11 gives a notification for inputting the authentication information to the PC 2 from the wireless communication unit 14, collates the authentication information from the PC 2 with the authentication information of the authentication information storage unit 15, and, if the authentication is successful, controls the gate unit 16 to enable reading and writing between the PC 2 and the memory unit 12.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a portable storage device such as a USB (Universal Serial Bus) memory, and more particularly to a portable storage device having a security function. [Background technology]

[0002] In recent years, portable storage devices such as USB memory sticks that can be carried around have come into widespread use as devices for transporting data. A USB memory stick is a portable storage device equipped with a USB controller and a flash memory, and is used by being inserted into a USB port of a computer such as a personal computer (hereinafter referred to as a PC) or a PDA (Personal Digital Assistant).

[0003] In recent years, most PCs are equipped with USB ports, and the use of USB memory is increasing. Since USB memory is portable, there is a risk of it being stolen or lost, so security measures are necessary for USB memory.

[0004] Conventional security measures include encrypting data in USB memory and restricting access by controlling IDs and passwords.

[0005] Patent Document 1 discloses a technology for encrypting data in a USB memory stick, in which the USB memory stick is inserted into a USB port of a PC and the data in the USB memory stick is encrypted by encryption software on the PC based on authentication information input from the PC.

[0006] The technology disclosed in Patent Document 1 is intended to reduce security risks when using USB memory by encryption. However, this technology is dependent on the OS and applications on the PC side, and has problems in terms of versatility.

[0007] Furthermore, Patent Document 2 discloses a technology in which a USB memory is equipped with a communication function, and when accessing a data file on the USB memory from a computer, access authentication is performed based on authentication information input via communication from a management terminal. [Prior art documents] [Patent documents]

[0008] [Patent Document 1] JP 2007-150780 A [Patent Document 2] JP 2011-170681 A Summary of the Invention [Problem to be solved by the invention]

[0009] As described above, the technology in Patent Document 1 is not very versatile because it depends on the OS and applications on the PC side.

[0010] In the above-mentioned Patent Document 2, the USB memory is configured to perform access authentication by wirelessly communicating with the management terminal. This makes it possible to prevent a third party who does not possess the management terminal from accessing the data files in the USB memory from a computer. Furthermore, since access authentication is performed by wireless communication between the USB memory and the management terminal, the user does not need to perform operations such as authentication, improving convenience.

[0011] However, the system disclosed in Patent Document 2 has drawbacks such as the need for a management terminal in addition to the computer, which increases the device configuration and the number of parts.

[0012] In view of the above-mentioned problems in the conventional technology, the present invention has an objective of providing a portable storage device that ensures security without relying on the OS or applications on the PC side and without increasing the device configuration or number of parts. [Means for solving the problem]

[0013] The inventors have studied a portable storage device that ensures security without relying on the OS or applications on the PC side, without increasing the device configuration or the number of parts. As a result of intensive study, the inventors have come up with the following configuration.

[0014] A portable storage device according to one embodiment of the present invention is a portable storage device having a connection unit that is attached to a connection port provided on a computer and a memory unit that is read and written by the computer, and is equipped with a wireless communication unit that wirelessly communicates with the computer, a gate unit that selects between a connected state and a disconnected state between the memory unit and the connection unit, an authentication information memory unit that stores authentication information, and a controller unit that discriminates the authentication information and controls the gate unit, wherein when the controller unit detects that the connection unit has been connected to the connection port of the computer, it notifies the computer from the wireless communication unit to input authentication information, compares the authentication information obtained from the wireless communication unit with the authentication information stored in the authentication information memory unit, and if authentication is successful, controls the gate unit, enabling reading and writing between the personal computer and the memory unit via the connection port and the connection unit.

[0015] A portable storage device according to one embodiment of the present invention is equipped with a wireless communication unit that performs wireless communication with the portable storage device, and when authentication of authentication information transmitted using the wireless function of the computer with authentication information stored in the portable storage device is successful, data transfer between the computer and the portable storage device becomes possible via the computer's connection port and connection unit. By performing authentication checks using the wireless function with the computer, authentication checks can be performed without the need to install dedicated software. Furthermore, data transfer between the portable storage device and the computer is performed via the personal computer's connection port and the portable storage device's connection unit, so that data leakage due to wireless communication can be prevented.

[0016] Furthermore, the present invention can be configured such that the computer and the portable storage device are connected via a wireless LAN, and the authentication information uses an SSID and a password of the wireless LAN.

[0017] By constructing a wireless LAN, authentication and verification between the computer and the portable storage device can be performed. By using a general-purpose wireless LAN such as WiFi, the security of the portable storage device can be ensured without compromising operability.

[0018] Furthermore, the present invention can be configured such that the computer and the portable storage device are connected in a peer-to-peer manner, and a PIN code is used as the authentication information.

[0019] The peer-to-peer function allows authentication and verification between a computer and a portable storage device. By using a general-purpose peer-to-peer communication such as Bluetooth, the security of the portable storage device can be ensured without compromising operability.

[0020] In the following description, numerous specific examples are set forth in order to provide a thorough understanding of the present invention. However, it will be apparent to one skilled in the art that the present invention may be practiced without these specific examples.

[0021] The following disclosure is therefore to be considered as illustrative of the present invention and is not intended to limit the invention to the specific embodiments illustrated by the following drawings or description. Effect of the Invention

[0022] According to one embodiment of the present invention, a wireless function is installed in the portable storage device, and the computer uses the wireless function to perform authentication and verification with the portable memory, and after authentication and verification is established, data transfer is possible between the connection port of the computer and the connection port of the portable storage device. By performing authentication and verification using a general-purpose wireless function, the present invention can perform authentication and verification without the need to install dedicated software. Furthermore, data transfer between the portable storage device and the computer is performed via the connection port of the computer and the connection part of the portable storage device, so that data leakage due to wireless communication can be prevented. [Brief description of the drawings]

[0023] [Figure 1] FIG. 1 is a schematic diagram showing a portable storage device (USB memory) and a PC according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a block diagram showing the configuration of a portable storage device (USB memory) and a PC according to the embodiment of the present invention. [Diagram 3] FIG. 3 is a schematic diagram showing a state in which the portable storage device (USB memory) according to the embodiment of the present invention is connected to a USB port of a PC and the portable storage device and the PC are wirelessly connected via a wireless LAN. [Figure 4] FIG. 4 is a schematic diagram showing a state in which the portable storage device (USB memory) according to the embodiment of the present invention is connected to a USB port of a PC and the portable storage device and the PC are wirelessly connected through peer-to-peer communication. [Diagram 5] FIG. 5 is a block diagram showing the configuration of a portable storage device (USB memory) and a PC according to another embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0024] Next, a portable storage device according to an embodiment of the present invention will be specifically described. Note that the portable storage device according to the present invention is not limited to the embodiment described below, and can be appropriately modified without departing from the spirit and scope of the present invention.

[0025] FIG. 1 is a schematic diagram showing a portable storage device (USB memory) and a PC according to an embodiment of the present invention, and FIG. 2 is a block diagram showing the configurations of the portable storage device (USB memory) and the PC according to the present invention.

[0026] In this embodiment, a USB memory 1 is used as the portable storage device. The USB memory 1 can be carried around. Most PCs 2 are provided with a USB port 23a as a connection port, and the connector 13a of the USB memory 1 is inserted into the USB port 23a of the PC 2, and the USB memory 1 is connected to the USB port 23a of the PC 2. Then, as described later, when authentication is successful, the USB memory 1 and the PC 2 can send and receive data between each other.

[0027] The USB memory 1 has a connector 13a and a USB interface (I / F) 13 that function as a connection section, and takes in data from the PC 2 from the connector 13a and the USB interface (I / F) 13 to a bus 18. In addition, data in the USB memory 1 is transmitted to the PC 2 via the bus 18, the USB interface (I / F) 13 and the connector 13a.

[0028] The USB memory 1 of the present invention includes a wireless communication unit 14 that executes wireless communication. The PC 2 includes a wireless communication unit 24 that executes wireless communication. The USB memory 1 and the PC 2 can perform wireless communication via the wireless communication units 14 and 24. The wireless communication is performed between the wireless communication unit 14 of the USB memory 1 and the wireless communication unit 24 of the PC 2 based on standards such as the WiFi (registered trademark) standard and the Bluetooth (registered trademark) standard.

[0029] In the case of wireless communication based on the Wi-Fi standard, communication is performed between the wireless communication unit 14 of the USB memory 1 and the wireless communication unit 24 of the PC 2 via a wireless LAN (Local Area Network) 3. In the case of wireless communication based on the Bluetooth standard, communication is performed peer-to-peer between the wireless communication unit 14 of the USB memory 1 and the wireless communication unit 24 of the PC 2.

[0030] The USB memory 1 includes a flash memory unit 12 as a storage unit capable of storing data, a connector 13a, a USB interface (I / F) 13 connected to the connector 13a and serving as an interface for data transmission / reception between the USB memory 1 and the PC 2, a wireless communication unit 14 that performs communication in accordance with a wireless communication standard, and a memory controller 11 that controls each unit.The USB memory 1 further includes an authentication information storage unit 15 that stores authentication information such as an SSID (Service Set Identifier), a PIN (Personal Identification Number) code, and a password, and a gate unit 16 that selects between a connected state and a disconnected state between the flash memory unit 12 and the USB interface (I / F) 13.

[0031] In this embodiment, the USB interface (I / F) 13, memory controller 11, wireless communication unit 14, authentication information storage unit 15, and gate unit 16 are connected via a bus 18, and various data are transmitted and received via the bus 18. The flash memory unit 12 is connected to the bus 18 via the gate unit 16. The flash memory unit 12 is connected to the USB interface (I / F) 13 via the gate unit 16 and the bus 18, and the gate unit 16 selects between a connected state and a disconnected state between the flash memory unit 12 and the USB interface (I / F) 13.

[0032] The USB interface 13 provides a signal indicating the connection state between the USB memory 1 and the PC 2 to the memory controller 11. For example, when the USB memory 1 is connected to the PC 2, power is supplied from the PC 2 to the USB memory 1 via the USB power terminal. The connection state between the USB memory 1 and the PC 2 can be detected by providing the presence or absence of this power supply state from the USB interface 13 to the memory controller 11.

[0033] The wireless communication unit 14 communicates with the PC 2 or the wireless LAN 3 via an antenna 14a.

[0034] The memory controller 11 performs the operations of the authentication matching unit 11a, the gate control unit 11b, and the communication control unit 11c based on a program from a program storage unit 17 in which the program is written, and controls the wireless communication unit 14 and the gate unit 16.

[0035] The PC 2 includes a memory unit 22 capable of storing a large amount of data, an input unit 25 that accepts user operation inputs from a keyboard, mouse, touch pad, etc., and a display unit 26 that displays images and characters. The PC 2 also includes a CPU (Central Processing Unit) 21 that controls each unit. The PC 2 also includes a USB interface (I / F) 23 that serves as an interface for data transmitted between the PC 2 and the USB memory 1, and a USB port 23a that serves as a connection port whose shape matches that of a connector 13a provided on the USB memory 1. The PC 2 also includes a wireless communication unit 24 that communicates in accordance with a wireless communication standard. The wireless communication unit 24 communicates with the USB memory 1 or the wireless LAN 3 via an antenna 24a.

[0036] The CPU 21 and each unit are connected via a bus 27, and data is transmitted via the bus 27.

[0037] The memory unit 22 stores, for example, a Windows (registered trademark) OS and application software programs. The CPU 21 performs various operations based on the OS and application software programs read from the memory unit 22.

[0038] 1, a USB connector 13a of the USB memory 1 is inserted into a USB port 23a provided in the PC 2, and the USB memory 1 is attached to the PC 2. When the USB memory 1 is attached to the PC 2, a memory controller 11 of the USB memory 1 detects that the USB memory 1 has been attached to the PC 2. When the memory controller 11 detects that the USB memory 1 has been attached to the PC 2, it controls the wireless communication unit 14 to transmit notification information for inputting authentication information from the wireless communication unit 14 to the PC 2. This notification is notification information for inputting authentication information based on, for example, the WiFi standard or the Bluetooth standard.

[0039] 3 shows a state in which the USB memory 1 and the PC 2 communicate with each other via a wireless LAN 3 such as WiFi. When the USB memory 1 and the PC 2 are wirelessly connected to each other via the wireless LAN 3 such as WiFi, the memory controller 11 of the USB memory 1 transmits a notification requesting authentication information including the SSID and password of the wireless LAN from the wireless communication unit 14 to the PC 2 via the wireless LAN 3.

[0040] When the PC 2 receives a notification requesting the SSID and password from the USB memory 1, the PC 2 displays a message prompting the user to enter the SSID and password on the display unit 26. The user enters the SSID and password from the input unit 25, and transmits them from the wireless communication unit 24 to the USB memory 1 via the wireless LAN 3.

[0041] The wireless communication unit 14 of the USB memory 1 receives the SSID and password from the PC 2 and sends them to the memory controller 11 via the bus 18. The memory controller 11 compares the authentication information stored in the authentication information storage unit 15 with the SSID and password as the authentication information sent from the PC 2. The authentication information storage unit 15 stores in advance the SSID and password of a general-purpose wireless LAN 3 such as WiFi, a PIN code for Bluetooth, and the like.

[0042] The authentication comparison unit 11a of the memory controller 11 compares the authentication information obtained from the wireless communication unit 14 with the authentication information stored in the authentication information storage unit 15, and if the authentication is successful, the gate control unit 11b controls the gate unit 16 to connect the flash memory unit 12 to the bus 18. Then, reading and writing between the PC 2 and the flash memory unit 12 of the USB memory 1 becomes possible via the USB interface 13, the USB connector 13a, the USB port 23a, and the USB interface 23.

[0043] In this way, authentication and verification can be performed using the wireless LAN function between the USB memory 1 and the PC 2, making it possible to perform authentication and verification without the need to install special software. Furthermore, data transfer between the USB memory 1 and the PC 2 is performed via the USB port 23a of the PC 2 and the connector 13a of the USB memory 1, preventing data leakage due to wireless communication.

[0044] In addition, by using a general-purpose wireless LAN such as WiFi, the security of the portable storage device can be ensured without compromising operability.

[0045] 4 shows a state in which the USB memory 1 and the PC 2 communicate with each other through a peer-to-peer connection such as Bluetooth. When the USB memory 1 and the PC 2 are wirelessly connected through a peer-to-peer connection such as Bluetooth, the memory controller 11 of the USB memory 1 transmits a notification requesting authentication information including a PIN code for the peer-to-peer connection from the wireless communication unit 14 to the PC 2 via wireless communication.

[0046] When the PC 2 receives a notification requesting the PIN code from the USB memory 1, the PC 2 displays a message prompting the user to enter the PIN code on the display unit 26. The user enters the PIN code from the input unit 25, and the wireless communication unit 24 transmits the PIN code to the USB memory 1 via wireless communication.

[0047] The wireless communication unit 14 of the USB memory 1 receives the PIN code from the PC 2 and sends it to the memory controller 11 via the bus 18. The memory controller 11 compares the authentication information stored in the authentication information storage unit 15 with the PIN code sent as authentication information from the PC 2. The PIN code is stored in advance in the authentication information storage unit 15.

[0048] The authentication comparison unit 11a of the memory controller 11 compares the authentication information obtained from the wireless communication unit 14 with the authentication information stored in the authentication information storage unit 15, and if the authentication is successful, the gate control unit 11b controls the gate unit 16 to connect the flash memory unit 12 to the bus 18. Then, reading and writing between the PC 2 and the flash memory unit 12 of the USB memory 1 becomes possible via the USB interface 13, the USB connector 13a, the USB port 23a, and the USB interface 23.

[0049] In this way, by using general-purpose peer-to-peer communication such as Bluetooth to perform authentication verification between the USB memory 1 and the PC 2, it is possible to perform authentication verification without the need to install special software, and therefore it is possible to ensure the security of the USB memory 1 without compromising operability. Furthermore, data transfer between the USB memory 1 and the PC 2 is performed via the USB port 23a of the PC 2 and the connector 13a of the USB memory 1, which makes it possible to prevent data leakage by wireless communication.

[0050] Next, another embodiment of the present invention will be described with reference to Fig. 5. Fig. 5 is a block diagram showing the configuration of a portable storage device (USB memory) and a PC according to another embodiment of the present invention. Note that the same components as those in Fig. 2 are given the same reference numerals and will not be described.

[0051] In the embodiment shown in Fig. 2, the authentication information storage unit 15 and the program storage unit 17 are provided separately from the flash memory unit 12. In contrast to this, in another embodiment shown in Fig. 5, areas for the authentication information storage unit 15a and the program storage unit 17a are provided in the flash memory unit 12a. The gate unit 16a is provided between the USB interface 13 and the bus 18, and is configured to connect or block the transmission and reception of data between the USB interface 13 and the bus 18.

[0052] By providing an authentication information storage section 15a and a program storage section 17a in the flash memory section 12a, the present invention can be implemented by software-aware processing.

[0053] In the above embodiment, a USB memory 1 is used as a portable storage device. However, the present invention is not limited to a USB memory 1 as a portable storage device, and can be applied to any portable storage device, such as an SD card.

[0054] In the above embodiment, a personal computer is used as the computer. However, the computer is not limited to a personal computer, and may be a PDA or the like.

[0055] Any combination of the above-described embodiments and modifications is also useful as an embodiment of the present invention. A new embodiment resulting from the combination has the combined effects of each of the combined embodiments and modifications. [Industrial Applicability]

[0056] The present invention can be used in portable storage devices that can be attached to and detached from personal computers, such as USB memories. [Explanation of symbols]

[0057] 1: USB memory 2: PC 3:Wireless LAN 11: Memory controller 11a: Authentication verification section 11b: Gate control section 11c: Communication control section 12: Flash memory section 13: USB interface 13a: USB connector 14: Wireless communication section 14a: Antenna 15: Authentication information storage section 16: Gate section 17: Program memory section 21: CPU 22: Memory section 23: USB interface 23a: USB port 24: Wireless communication section 24a: Antenna 25: Input section

Claims

1. A portable storage device having a connection unit that is attached to a connection port of a computer and a storage unit that is readable and writable by the computer, a wireless communication unit for wirelessly communicating with the computer, a gate unit for selecting a connected state or a disconnected state between the storage unit and the connection unit, an authentication information storage unit for storing authentication information, and a controller unit for determining the authentication information and controlling the gate unit, when the controller detects that the connection unit is connected to the connection port of the computer, it issues a notification to the computer to input authentication information from the wireless communication unit, compares the authentication information obtained from the wireless communication unit with the authentication information stored in the authentication information storage unit, and if the authentication is successful, controls the gate unit to enable reading and writing between the computer and the storage unit via the connection port and the connection unit. Portable storage devices.

2. the computer and the portable storage device are connected via a wireless LAN, and the authentication information is an SSID and a password of the wireless LAN; The portable storage device according to claim 1 .

3. the computer and the portable storage device are connected in a peer-to-peer manner, and the authentication information is a PIN code; The portable storage device according to claim 1 .

Images