Secure data access in hybrid disk drive

摘要

Data are accessed securely in a data storage device that includes a non-volatile solid-state storage device integrated with a magnetic storage device. An identical copy of drive security data, such as an encrypted version of a drive access password, is stored in both the non-volatile solid-state storage device and in the magnetic storage device. In response to receiving a command from a host device that results in access to the magnetic storage device, access is granted to the magnetic storage device if the copy of drive security data stored in the non-volatile solid-state storage device matches the copy of drive security data stored in the magnetic storage device. Furthermore, encrypted drive-unique identification data associated with the drive may be stored in both the non-volatile solid-state storage device and the magnetic storage device, and access is granted if both copies of the encrypted drive-unique identification data match.

主权项

1. A data storage device, comprising:
a first non-volatile storage device configured to store user data and first password data; a second non-volatile storage device configured to store system data associated with the first nonvolatile storage device and first drive-unique identification; a magnetic storage device configured to store second password data and system data associated with the data storage device, the system data including second drive-unique identification data; and a controller configured to: receive, from the second non-volatile storage device, first drive-unique identification data; receive, from the magnetic storage device, the second drive-unique identification data; in response to the first drive-unique identification data failing to match the second drive-unique identification data, lock the data storage device; receive, from the first non-volatile storage device, the first password data; receive, from the magnetic storage device, the second password data; compare the first password data to the second password data; and in response to the first password data failing to match the second password data, lock the data storage device.