Disk array system and method for security

A disk array system, connected to a host system, capable of mounting a plurality of disk drives, comprising:

• a memory that stores first certificate data generated by the host system;
• and
• a disk controller that controls data input/output to/from the disk drives;
• wherein each of the disk drives includes a disk medium, and an HDD controller, the disk medium having a system area that stores second certificate data generated by a host system, and a data area that stores user data, the HDD controller controlling data input/output to/from the system area and the data area;
• and
• wherein the HDD controller, upon a disk drive from among the disk drives being mounted in the disk array system, compares the first certificate data and the second certificate data, and if they do not correspond to each other, operates in an operation mode in which at least read access from the disk controller to the disk drive is prohibited.

A method for security comprising the steps of:

• detecting a disk drive being mounted in a disk array system;
• reading first key data inherent to the disk array system, the first key data being stored in a memory in the disk array system;
• reading second key data inherent to a disk array system, the second key data being stored in a system area in the disk drive;
• comparing the first key data and the second key data;
• and
• upon the first key data and the second key data not corresponding to each other, operating in an operation mode from among:
• (1) an operation mode in which read access from the disk array system to the drive disk is prohibited;
• (2) an operation mode in which both read access and write access from the disk array system to the disk drive are prohibited;
• and (3) an operation mode in which a zero or a one is forcibly written over user data in the disk drive.