Intelligent controller system and method for smart card memory modules

Patent metadata

Field	Value
Publication number	US-9111045-B2
Application number	US-201213448172-A
Country	US
Kind code	B2
Filing date	Apr 16, 2012
Priority date	Nov 12, 2007
Publication date	Aug 18, 2015
Grant date	Aug 18, 2015

Abstract

A storage device contains a smart-card device and a memory device, both of which are accessed though a controller. The storage device may be used in the same manner as a conventional smart-card device, or it may be used to store a relatively large amount of data in various partitions corresponding to the protection level of the data stored therein. The smart-card device stores critical security parameters that are provided to the controller to protect access to some or all of the partitions of the memory device. A host connected to the controller issues commands, and the controller analyzes the commands and responds to them in various ways depending upon the nature of the command. In particular, depending upon the nature of the command, the controller may either pass the command to the smart-card device, or ignore the command either indefinitely or until a predetermined event has occurred.

First claim

What is claimed is:

1. A storage device, comprising:
a smart-card device;
a non-volatile memory device packaged with the smart-card device and configured to store data, wherein the non-volatile memory device comprises a flash memory device; and
a controller configured to analyze commands issued to the smart-card device or the non-volatile memory device, the controller further configured to:
issue to the smart-card device a command to power down the smart-card device responsive, at least in part, to receipt of a power down command;

access the non-volatile memory device while the smart-card device is powered down; and
selectively ignore a command to obtain a critical security parameter stored in the smart-card device.

2. The storage device of claim 1 , wherein one of the commands comprises a power-up command, wherein the controller is configured to provide a synchronization command responsive, at least in part, to receipt of the power-up command.

3. The storage device of claim 1 , wherein the smart-card device is configured to execute applications stored in the non-volatile memory device.

4. The storage device of claim 1 , wherein the critical security parameter comprises an encryption key.

5. The storage device of claim 1 , wherein the non-volatile memory device comprises a plurality of partitions.

6. The storage device of claim 5 , wherein each of the plurality of partitions corresponds to a respective set of authentication states.

7. The storage device of claim 5 , wherein one of the commands comprises a command to resize one of the plurality of partitions.

8. A method of accessing a storage device including a smart-card device, comprising:
receiving an authentication signal at the storage device;
authenticating the storage device with the smart-card device responsive, at least in part, to receipt of the authentication signal;
powering down the smart-card device responsive, at least in part, to receipt of a power down command;
accessing a non-volatile memory of the storage device while the smart-card device is powered down, wherein the non-volatile memory comprises a flash memory;
powering up the smart-card device responsive, at least in part, to receipt of a power up command; and
synchronizing an authentication state of the smart-card device to an authentication state of the storage device responsive, at least in part, to said powering up the smart-card device.

9. The method of claim 8 , wherein said powering up the smart-card device comprises:
operating the smart card in a reset state.

10. The method of claim 8 , wherein the authentication state of the storage device comprises an unauthenticated state.

11. The method of claim 8 , further comprising:
after said authenticating the storage device with the smart-card device, selectively ignoring a command to obtain a critical security parameter stored in the smart-card device based on the authentication state.

12. The method of claim 8 , wherein said authenticating the storage device with the smart-card device comprises:
receiving an identifier at the smart-card device; and
examining the identifier to determine whether the identifier corresponds to a valid identity.

13. The method of claim 8 , wherein said synchronizing an authentication state of the smart-card device to an authentication state of the storage device comprises:
providing a synchronize command to the smart-card device from a controller.

Assignees

• Asnaashari Mehdi
• Shah Ruchirkumar D
• Prevost Sylvain
• Krishna Ksheerabdhi
• Micron Technology Inc

Inventors

• Asnaashari Mehdi
• Shah Ruchirkumar D
• Prevost Sylvain
• Krishna Ksheerabdhi

Classifications

• G06F21/34 Primary

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• G06F13/387 Primary

  for adaptation of different data processing systems to different peripheral devices, e.g. protocol converters for incompatible systems, open system · CPC title

• G06F21/79

  in semiconductor storage media, e.g. directly-addressable memories · CPC title

• G06F21/77

  in smart cards · CPC title

• G06K19/073

  Special arrangements for circuits, e.g. for protecting identification code in memory (protection against unauthorised use of computer memory G06F12/14) · CPC title