Apparatus and method for protection of stored data

摘要

An apparatus and a method for protection of data stored in a data storage unit that comprises a plurality of storage areas. A data interface connects to a computer system and transfer of a data signal from the computer system to the apparatus requests access to the data storage unit. A main control unit is configured to receive the data signal and is connected to the data storage unit. A user control unit is connected to the main control unit and is arranged to be set in different modes and generates a mode selection signal indicating the selected mode. The main control unit is configured to receive the mode selection signal, and depending on the selected mode, control connection of the apparatus to a plurality of networks, and direct the request to a storage area of the plurality of storage areas of the data storage unit.

主权项

1. An apparatus for the protection of data stored in a data storage unit comprising a plurality of storage areas; the apparatus comprising:
the data storage unit; a data interface for connection to a computer system and for transfer of one or more data signals from the computer system to the protection apparatus indicating request(s) for access to said data storage unit; a main control processor configured to receive said data signals, wherein said main control processor is connected to said data storage unit; a user control processor connected to said main control processor, wherein said user control processor is arranged to be set in different modes and to generate a mode selection signal indicating a selected mode; wherein said main control processor comprises access rules for respective mode for access of said storage areas, and is configured to receive said mode selection signal, and in dependence on the selected mode:
control connection of the apparatus to a plurality of networks; anddirect said request(s) for access to a storage area of said plurality of storage areas of said data storage unit; wherein the plurality of storage areas comprises a system storage area divided into sub storage areas of which one is allowed writing to; and wherein the main control processor comprises an internal table, the main control processor also being configured to check the internal table indicating where data has been written in the sub storage area allowed writing to, and is configured to read from one of said sub storage areas in dependence on the result of the checking, and further is configured to delete all data from said sub storage area allowed writing to in response to a mode selection signal indicating a mode different from a current mode.