1. A method of allocating a plurality of secure areas in an insecure area of a storage device, the method comprising:
allocating a plurality of secure areas of the storage device for storing data to be received within any portion of an insecure area;
sending position information regarding the secure areas allocated within the insecure area to a host device;
receiving the position information and data to be stored in the secure areas from a secure application of the host device; and
encrypting and storing the data in the insecure area based on the position information;
wherein the allocating of the secure areas comprises:
receiving information regarding a size of the data from the host device; and
allocating the secure areas having a sufficient size to store the data in the insecure area,
wherein the method further comprises changing the position information using a hash table, and
when receiving a hash value from the host device, the method further comprises confirming an address corresponding to the hash value while referring to the hash table, and extracting data stored at the confirmed address.
2. The method of claim 1, further comprising performing authentication with the secure application of the host device.
3. The method of claim 1, further comprising:
receiving a request to access the data from the secure application of the host device;
extracting the data from the secure areas within the insecure area and decrypting the data; and
sending the decrypted data to the host device.
4. The method of claim 3, wherein the sending of the decrypted data comprises:
encrypting the decrypted data using a predetermined encryption method on which an agreement is made with the secure application of the host device; and
sending the encrypted data to the host device.
5. The method according to claim 1, wherein the secure areas protect the stored data and prevents an unauthorized user or application from accessing or changing the stored data.
6. A method of allocating a plurality of secure areas in an insecure area of a storage device, the method comprising:
allocating a plurality of secure areas of the storage device for storing data to be received within any portion of an insecure area;
receiving data to be stored in the secure areas from a secure application of a host device;
securing the secure areas for storing the data within the insecure area and encrypting and storing the data in the secure areas; and
sending a result of the storing the data to the host device;
wherein the allocating of the secure areas comprises:
receiving information regarding a size of the data from the host device; and
allocating the secure areas having a sufficient size to store the data in the insecure area,
wherein the method further comprises changing the position information using a hash table, and
when receiving a hash value from the host device, the method further comprises confirming an address corresponding to the hash value while referring to the hash table, and extracting data stored at the confirmed address.
7. The method of claim 6, wherein the result of the storing the data comprises position information regarding the secure areas storing the data within the insecure area.
8. The method of claim 6, further comprising performing authentication with the secure application of the host device.
9. The method of claim 6, further comprising:
receiving a request to access the data from the secure application of the host device;
extracting the data from the secure areas within the insecure area and decrypting the data; and
sending the decrypted data to the host device.
10. The method of claim 9, wherein the sending of the decrypted data comprises:
encrypting the decrypted data using a predetermined encryption method on which an agreement is made with the secure application of the host device; and
sending the encrypted data to the host device.
11. A storage device for allocating a plurality of secure areas in an insecure area, the storage device comprising:
a storage section comprising an insecure area and a plurality of secure areas of the storage device, wherein the secure areas for storing data to be received are allocated within any portion of the insecure area;
a transmitter which sends position information regarding the secure areas of the storage section to a host device;
a receiver which receives the position information and data to be stored in the secure areas from the host device; and
a secure application which encrypts and stores the data in the storage section based on the position information;
wherein the secure areas are allocated by:
receiving information regarding a size of the data from the host device; and
allocating the secure areas having a sufficient size to store the data in the insecure area,
wherein the secure application changes the position information using a hash table, and
when receiving a hash value from the host device, the secure application confirms an address corresponding to the hash value while referring to the hash table, and extracts data stored at the confirmed address.
12. The storage device of claim 11, wherein the secure application performs authentication with the host device.
13. The storage device of claim 11, wherein the receiver receives a request to access the data from a secure application included in the host device, the secure application included in the storage device extracts the data from the secure areas within the insecure area and decrypts the data, and the transmitter sends the decrypted data to the host device.
14. The storage device of claim 13, wherein the secure application included in the storage device encrypts the decrypted data using a predetermined encryption method on which an agreement is made with the host device, and the transmitter sends the encrypted data to the host device.
15. The storage device according to claim 11, wherein the secure application includes a table for mapping an address value of the secure areas existing in the insecure area to an address value recognizable by the secure application.
16. A storage device for allocating a plurality of secure areas in an insecure area, the storage device comprising:
a storage section comprising an insecure area and a plurality of secure of the storage device, wherein the secure areas for storing data to be received are allocated within any portion of the insecure area;
a receiver which receives data to be stored in the secure areas of the storage section from a host device;
a secure application which secures a space for the secure areas needed to store the data within the storage section, and encrypts and stores the data in the secure areas; and
a transmitter which sends a result of the storing the data within the storage section to the host device;
wherein the secure areas are allocated by:
receiving information regarding a size of the data from the host device; and
allocating the secure areas having a sufficient size to store the data in the insecure area,
wherein the secure application changes the position information using a hash table, and
when receiving a hash value from the host device, the secure application confirms an address corresponding to the hash value while referring to the hash table, and extracts data stored at the confirmed address.
17. The storage device of claim 16, wherein the result of the storing the data comprises position information regarding the secure areas storing the data within the insecure area.
18. The storage device of claim 16, wherein the secure application performs authentication with the host device.
19. The storage device of claim 16, wherein the receiver receives a request to access the data from the host device, the secure application extracts the data from the secure areas within the insecure area and decrypts the data, and the transmitter sends the decrypted data to the host device.
20. The storage device of claim 19, wherein the secure application encrypts the decrypted data using a predetermined encryption method on which an agreement is made with the host device.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for guaranteed delivery of data from an origin to multiple destinations, the method comprising:
receiving the data from said origin to a network only once at a speed of link connecting said origin to said network, without waiting for said destinations to be connected to said network, wherein the data is sent by said origin in a specific format and sequence;
delivering the data from said network to one or more said destinations at a speed of link connecting said destination to said network, thereby creating a point-to-multipoint connection between said network and said destinations, wherein the data is delivered to said destinations in said specific format and sequence;
receiving a request from a disconnected destination of said destinations to connect to said network and to receive the data in said specific format and sequence sent by said origin, wherein a part of the data has already been sent from said origin to said network;
connecting to said requesting destination through said network upon said request on an existing said point-to-multipoint connection; and
delivering to said requesting destination said part of the data in said specific format and sequence sent by said origin.
2. The method of claim 1 further comprising:
storing the data in said network in said specific format and sequence sent by said origin.
3. The method of claim 1,
wherein all of the data has already been sent from said origin to said network and said origin is disconnected from said network
and
said delivery step delivers to said requesting destination said all of the data in said specific format and sequence sent by said origin, wherein said requesting destination remains connected to said network and receives the data even after said origin is disconnected from said network.
4. The method of claim 1, further comprising:
initiating a request from said network to one of said destinations not connected to said network to establish a connection for said point-to-multipoint connections; and
delivering the data to one of said destinations based on specified scheduling constraints, wherein one of said destinations is available and reachable.
5. The method of claim 1, further comprising:
adding new destinations to be connected to said network, wherein said new destinations are not specified during the creation of said point-to-multipoint connection.
6. The method of claim 1, further comprising:
check pointing of data at fixed intervals during transmission of the data from said origin to said network and during transmission of the data from said network to said destinations.
7. The method of claim 6, wherein upon transmission failure, the data resumes transmission from the interval where said failure occurred.
8. The method of claim 1, further comprising
sending a positive acknowledgement from said network to said origin upon receipt of all the data from said origin.
9. The method of claim 7, further comprising
disconnecting said origin from said network upon the receipt of all the data from said origin.
10. The method of claim 1, wherein one of said destinations is connected to said network during transmission of the data from said origin to said network.
11. The method of claim 1, wherein one of said destinations is connected to said network after the transmission of all the data from said origin to said network.
12. A data transmission system, comprising:
a site connection manager located at an origin and also at each of a plurality of destinations for interacting between said origin and a network and between said destinations and said network;
an at least one first network connection manager located at said network configured to create a point-to-multipoint connection from said origin to said destinations, wherein the data is received from said origin to said network only once at a speed of link connecting said origin to said network without waiting for said destinations to be connected to said network; and
a checking point of data provided to check the data at fixed intervals during transmission of the data from said origin to said network and during transmission of the data from said network to said destinations.