Disk drive with embedded data encryption

Claim 2

A disk drive according to claim 1, wherein said encryption/decryption means is provided in integrated circuitry in the disk drive.

Claim 3

A disk drive according to claim 1 or claim 2, wherein the disk drive is a removable disk drive.

Claim 4

A disk drive according to any preceding claim, wherein the drive includes a microprocessor (3) which is linked to the encryption/decryption means (4), and said password-dependent security control means is incorporated, at least partly, in said microprocessor.

Claim 5

A disk drive according to claim 4, wherein said password-dependent security control means is incorporated partly in said encryption/decryption means (4).

Claim 6

A disk drive according to claim 4 or claim 5, wherein said password-dependent security control means further includes security key interface means for interfacing, in use of the drive, with discrete security key means (6a,6b) provided externally to the drive and which contains user input password data (CV).

Claim 7

A disk drive according to claim 4, wherein said microprocessor (3) is formed and arranged to be responsive to commands issued from a host system (9) in which the disk drive is used, and is programmed to: extract a password (CV) from a password input means (6a,6b) provided externally to the drive and connected, directly or indirectly, thereto; load the password extracted therefrom into the encryption/decryption means (4) ; and to receive a password evaluation signal issued by the encryption/decryption means in response to the password.

Claim 8

A disk drive according to claim 7, wherein the predetermined password data is stored in the encryption/decryption (4) means which is adapted to issue a first ("acceptance") predetermined password evaluation signal if said input password data (CV) matches said predetermined password data stored therein.

Claim 9

A disk drive according to claim 8, wherein the encryption/decryption means (4) is adapted to issue a second ("rejection") predetermined password evaluation signal if said input password data (CV) does not match said stored password data.

Claim 10

A disk drive according to claim 8 or claim 9, wherein said microprocessor (3) is programmed to activate the encryption/decryption means (4) if the password evaluation signal received from the encryption/decryption means matches a predetermined password evaluation signal programmed into a memory (12) of the microprocessor means, and to maintain the encryption/decryption means in a deactivated state if the password evaluation signal received from the encryption/decryption means does not match said pre-programmed password evaluation signal, and wherein the encryption/decryption means is formed and arranged such that in its activated state all data routed therethrough by the permanent security control means is encrypted/decrypted and in its deactivated state no data can pass through the encryption/decryption means.

Claim 11

A disk drive according to any of claims 4 to 10, wherein said permanent security control means of the drive is implemented at least partially as code pre-programmed into the microprocessor (3) of the disk drive.

Claim 12

A data access security control system for a computer, the system comprising a disk drive (DD 1 ) according to claim 1 which is provided with a security key interface device, and a discrete security key component for interengaging, in use, with the security key interface device, wherein said discrete security key component comprises a portable key card (6b) which contains user input password data (CV) for inputting to the password-dependent security control means of the drive, via the security key interface device provided as part of the data access security control system.

Claim 13

A control system according to claim 12, wherein said portable key card (6b) includes a TROM (Touch Read Only Memory) (6a) for contacting an input/output port of the security key interface device, said TROM containing said user input password data (CV).

Claim 14

An improved drive for removable mass storage devices, the drive having: mass storage device engaging means for engaging at least one removable mass storage device; drive control means for controlling operation of the drive; and read/write means for reading data from, and writing data onto, said at least one mass storage device engaged in said engaging means in use of the drive; wherein the improvement comprises the provision of encryption/decryption means, connected to said read write means, for encrypting data to be written onto, and decrypting data to be read from, said at least one mass storage device; said drive control means including permanent security control means formed and arranged for restricting read/write access to said at least one mass storage device via said encryption/decryption means, for at least the data content of data files to be written thereto or read therefrom, and password-dependent security control means formed and arranged for receiving user input password data, comparing said user input password data with predetermined password data stored in said password-dependent security control means, and for activation of said encryption/decryption means only in response to receipt of a valid password, whereby read/write access to said at least one mass storage device, in relation to at least the data content of data files, is restricted to holders of a valid password.