Encryption method for digital data memory card and assembly for performing the same

Abstract

Embodiments of a portable data storage device and a method of protecting data stored in the portable data storage device are provided. In one embodiment, the portable data storage device includes a device identification unique to the portable data storage device, a rights object containing information indicative of access rights and a verification identification, a memory to store the device identification and the verification identification, and controller logic. The memory is partitioned into a plurality of areas of memory, including: a first area as a protection area to store an instruction code, a second area as a partition table area to store a partition table, and a third area as a file area to store data files. In response to a request from a client external to the portable data storage device, the controller logic compares the verification identification with the device identification to allow the client to access of the data files if the verification identification matches the device identification.

1 . A portable data storage device comprising:
 a device identification unique to the portable data storage device;   a rights object containing information indicative of access rights and a verification identification;   a memory in which the device identification and the rights object are stored, the memory partitioned into a plurality of areas of memory including:
 a first area as a protection area to store an instruction code, 
 a second area as a partition table area to store a partition table, and 
 a third area as a file area to store data files; and 
   controller logic configured to compare the verification identification with the device identification in response to a request from a client external to the portable data storage device to allow the client to access of the data files if the verification identification matches the device identification.   
     
     
         2 . The device of  claim 1 , wherein the device identification is stored in the first area. 
     
     
         3 . The device of  claim 1 , wherein the device identification is stored in the second area. 
     
     
         4 . The device of  claim 1 , wherein the device identification is stored in the third area. 
     
     
         5 . The device of  claim 1 , wherein the memory further includes a fourth area as a controller area to store the controller logic. 
     
     
         6 . The device of  claim 5 , wherein the device identification is stored in the fourth area. 
     
     
         7 . The device of  claim 1 , wherein the client is an application programming interface (API) on a data retrieval device that is configured to retrieve data stored in the memory. 
     
     
         8 . The device of  claim 1 , wherein the verification identification is encrypted, and wherein the controller logic decrypts the verification identification before comparing the verification identification with the device identification. 
     
     
         9 . The device of  claim 1 , wherein the verification identification includes at least one bit of data from a name of a portion of the memory. 
     
     
         10 . The device of  claim 1 , wherein the controller logic encrypts data transferred to the client from the memory and decrypts data received from the client. 
     
     
         11 . The device of  claim 1 , wherein data transfer between the controller logic and the client is encrypted using public key infrastructure (PKI). 
     
     
         12 . The device of  claim 1 , wherein the device identification is generated from a combination of two or more of one-time programming, a random number generated by a random number generator, and a serial number of the memory. 
     
     
         13 . A method of protecting data stored in a portable data storage device, the method comprising:
 storing a device identification unique to the portable data storage device in a memory of the portable data storage device, the device identification generated from a combination of two or more of one-time programming, a random number generated by a random number generator, and a serial number of the memory;   storing a verification identification in the memory;   comparing the verification identification with the device identification; and   allowing access to data stored in the memory when the verification identification matches the device identification.   
     
     
         14 . The method of  claim 13 , wherein the device identification is stored in a protection area of the memory used to store an instruction code. 
     
     
         15 . The method of  claim 13 , wherein the device identification is stored in a partition table area of the memory used to store a partition table. 
     
     
         16 . The method of  claim 13 , wherein the device identification is stored in a file area of the memory used to store data files. 
     
     
         17 . The method of  claim 13 , wherein the device identification is stored in a controller area of the memory used to store controller logic. 
     
     
         18 . The method of  claim 13 , wherein the device identification is stored in a protection area of the memory used to store an instruction code. 
     
     
         19 . The method of  claim 13 , wherein the verification identification includes at least one bit of data from a name of a portion of the memory. 
     
     
         20 . The method of  claim 13  further comprising:
 encrypting data to be read from the memory; and   decrypting data to be written to the memory.