1. A storage device, comprising:
a controller and a second non-volatile memory, said controller including a first non-volatile memory, wherein
said controller further includes a first interface for connecting said controller to a host terminal device, a second interface for connecting said controller to said second non-volatile memory, a central processing device, and a volatile memory utilized by said central processing device,
said first non-volatile memory includes a first storage area for storing Km data used for encrypting or decrypting a program to be executed by said central processing device and a second storage area for storing data from said host terminal device,
said second non-volatile memory includes an access-permitted area for storing data from said host terminal device and an access-prohibited area for storing said program encrypted using said Km data, an access by a user being permitted to said access-permitted area but being limited to said access-prohibited area, and
said controller:
stores the data from said host terminal device in said access-permitted area of said second non-volatile memory without encryption, if a security level of the data from said host terminal device is lower than a predetermined level;
checks a free available capacity of said first non-volatile memory, if the security level of the data from said host terminal device is higher than the predetermined level;
stores the data from said host terminal device in said second storage area of said first non-volatile memory, if the free available capacity of said first non-volatile memory is sufficient; and
stores the data from said host terminal device in said access-permitted area of said second non-volatile memory after encrypting the data from said host terminal device by using said Km data, if the free available capacity of said first non-volatile memory is insufficient.
2. The storage device as claimed in claim 1, wherein said Km data includes key information and a program used for said encryption or said decryption processing.
3. The storage device as claimed in claim 1, wherein, in correspondence with a command or an attribute of data from said host terminal device, said controller determines whether to access said first non-volatile memory or to access said second non-volatile memory.
4. The storage device as claimed in claim 1, wherein, in correspondence with a command or an attribute of data from said host terminal device, said controller determines whether or not to encrypt general data, said general data having been received from said host terminal device so as to be written into said second non-volatile memory.
5. The storage device as claimed in claim 1, wherein said first non-volatile memory further includes at least one of a storage area for storing Ko data and a storage area for storing Ki data, said Ko data being used for cipher communication between a server and said host terminal device , said Ki data being used for cipher communication between said server and said storage device , said server being connected to said host terminal device via a network.
6. The storage device as claimed in claim 5, wherein said controller, using said Km data, encrypts at least one program of a program included in said Ko data and a program included in said Ki data, and then writes said encrypted one program into said access-prohibited area.
7. The storage device as claimed in claim 1, wherein said controller is an IC chip, said second non-volatile memory being a flash memory chip.
8. The storage devices a claimed in claim 1, wherein
said first non-volatile memory includes a storage area for storing Kl data which said central processing device uses for encryption or decryption according to said program stored in said second non-volatile memory.
9. The storage device as claimed in claim 1, wherein
tamper-resistibility of said controller is higher than that of said second non-volatile memory.
10. The storage device as claimed in claim 1, wherein said controller:
checks an attribute of the data from said host terminal device;
checks a free available capacity of said first non-volatile memory, if the data from said host terminal device is smaller than a predetermined capacity based on the attribute checked;
stores the data from said host terminal device in said second storage area of said first non-volatile memory, if the free available capacity of said first non-volatile memory is sufficient;
stores the data from said host terminal device in said access-permitted area of said second non-volatile memory after encrypting the data from said host terminal device by using said Km data, if the free available capacity of said first non-volatile memory is insufficient; and
stores the data from said host terminal device in said access-permitted area of said second non-volatile memory after encrypting the data from said host terminal device by using said Km data, if the data from said host terminal device is larger than said predetermined capacity based on the attribute checked.
11. The storage device as claimed in claim 10, wherein if the data from said host terminal device has no attribute, said controller checks the security level of the data from said terminal device.
12. The storage device as claimed in claim 10, wherein, if the security level of the data from said host terminal device is an intermediate level, said controller stores the data from said host terminal device in said access-permitted area of said second non-volatile memory after encrypting the data from said host terminal device by using said Km data without checking the free available capacity of said first non-volatile memory.
13. A host terminal device, comprising:
a connectabledisconnectable storage device including a controller and a second non-volatile memory, said controller including a first non-volatile memory,
a first interface for connecting said host terminal device to said storage device, and
a first central processing device, wherein
said controller further includes a second interface for connecting said controller to said first interface, a third interface for connecting said controller to said second non-volatile memory, and a second central processing device,
said first non-volatile memory includes a first storage area for storing Km data used for encrypting or decrypting a program to be executed by said second central processing device and a second storage area for storing data from said host terminal device,
said second non-volatile memory includes an access-permitted area for storing data from said host terminal device and an access-prohibited area for storing said program encrypted using said Km data, an access by a user being permitted to said access-permitted area but being limited to said access-prohibited area, and
said controller:
stores the data from said host terminal device in said access-permitted area of said second non-volatile memory without encryption, if a security level of the data from said host terminal device is lower than a predetermined level;
checks a free available capacity of said first non-volatile memory, if the security level of the data from said host terminal device is higher than the predetermined level;
stores the data from said host terminal device in said second storage area of said first non-volatile memory, if the free available capacity of said first non-volatile memory is sufficient; and
stores the data from said host terminal device in said access-permitted area of said second non-volatile memory after encrypting the data from said host terminal device by using said Km data, if the free available capacity of said first non-volatile memory is insufficient.
14. The host terminal device as claimed in claim 13, wherein
said first non-volatile memory further stores Ko key information used for cipher communication a server and said host terminal device, said server being connected to said host terminal device via a network,
said first central processing device reads out said Ko key information from said first non-volatile memory, encrypting said Ko key information by using an encryption key that is capable of being decrypted by said server, and transmitting said encrypted Ko key information to said server,
said host terminal device then receives, from said server, data encrypted by using said Ko key information.
15. The host terminal device as claimed in claim 13, wherein
said first non-volatile memory further stores Ki key information used for cipher communication between a server and said storage device , said server being connected to said host terminal device via a network,
said second central processing device reads out said Ki key information from said first non-volatile memory, encrypting said Ki key information by using an encryption key that is capable of being decrypted by said server, and transmitting said encrypted Ki key information to said server via said host terminal device, and
said host terminal device then receives, from said server, data encrypted by using said Ki key information and transmitting the data thus received to said storage device.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A polishing pad, comprising:
a plurality of abrasive units each containing:
an adhesive compound; and
a plurality of abrasive particles distributed evenly within the adhesive compound,
wherein the surface of the abrasive units in contact with the surface of a wafer is roughened and the abrasive units are shaped into a triangular cone, hexagonal cone or circular cylinder and set up as an array.
2. The polishing pad of claim 1, wherein material constituting the abrasive particles comprises cerium oxide (CeO2).
3. The polishing pad of claim 1, wherein material constituting the adhesive compound comprises a resin.
4. A method of polishing a wafer, comprising the steps of:
providing a first polishing pad, wherein the first polishing pad comprises a plurality of first abrasive units each fabricated using an adhesive compound with evenly distributed abrasive particles therein;
performing a first polishing operation on the first polishing pad to planarize a wafer;
providing a second polishing pad, wherein the second polishing pad comprises a plurality of second abrasive units each fabricated using an adhesive compound with evenly distributed abrasive particles therein, and the surface of the second abrasive units in contact with the wafer is roughened and the abrasive units are shaped into a triangular cone, hexagonal cone or circular cylinder and set up as an array; and
performing a second polishing operation on the second polishing pad.
5. The wafer polishing method of claim 4, wherein material constituting the abrasive particles comprises cerium oxide (CeO2).
6. The wafer polishing method of claim 4, wherein material constituting the adhesive compound comprises a resin.
7-10. (cancelled)
11. The wafer polishing method of claim 4, wherein the second polishing operation is conducted at a rate faster than that of the first polishing operation.
12. The wafer polishing method of claim 4, wherein the second polishing operation is conducted at least at a same rate as the first polishing operation.