Data processing device and data processing method

摘要

A data encryption device is connected between an HDD and an HDD controller that controls the HDD. The data encryption device encrypts data that is stored from the HDD controller to the HDD, and decrypts data that is read from the HDD. A CPU of the data encryption device receives a command issued from the HDD controller to the HDD, and determines whether the command is executable at the HDD. When it is determined that the command is executable, the command is issued to the HDD. On the other hand, when it is determined that the command is unexecutable, the CPU prohibits issuance of the command to the HDD. Furthermore, when a command issued to the HDD is a specific command, the CPU bypasses data transferred between the HDD controller and the HDD without encryption or decryption.

主权项

1. A data processing device for connection between a storage device and a controlling device, the data processing device comprising:
an encryption unit configured to encrypt data which is received from the controlling device and is to be transmitted to the storage device; a decryption unit configured to decrypt data which is encrypted, is received from the storage device and is to be transmitted to the controlling device; a receiving unit configured to receive commands including a first command for reading data which is encrypted by the encryption unit and is stored in the storage device and a second command for reading data which is not encrypted by the encryption unit and is stored in the storage device from the controlling device; a storing unit configured to store reference data for determining whether a command is to be transmitted to the storage device; a determining unit configured to determine whether to transmit a command received by the receiving unit to the storage device, based on the reference data stored in the storing unit; a transmitting unit configured to transmit to the storage device the command determined to be transmitted to the storage device, wherein the transmitting unit does not transmit to the storage device the command which is not determined to be transmitted to the storage device; and a controlling unit configured to, when the command which is determined to be transmitted and is transmitted to the storage device is the first command, control the decryption unit to perform a decryption process on the data which is encrypted and is received from the storage device, wherein, when the command which is determined to be transmitted and is transmitted to the storage device is the second command, the controlling unit does not control the decryption unit to perform the decryption process on the data which is not encrypted and is received from the storage device.