Storage device and access control system thereof, sd card and data access control method thereof

A storage device, comprising:

• an interface module;
• a storage module comprising:
• a public storage unit for storing data without keeping secret;
• a private storage unit for storing data kept secret;
• a control module connected to the storage module and the interface module, comprising:
• a direct access unit for controlling an external device to access data stored in the public storage unit;
• a storage isolating firmware unit for stopping the external device from unauthorized accessing the private storage unit;
• and
• a virtual machine operating system unit for installing some applications according to the requirements of user, and performing the applications in a protected mode combined with the storage isolating firmware unit.

A access control system of storage device, comprising:

• a storage device comprising:
• an interface module;
• a storage module comprising:
• a public storage unit for storing data without keeping secret;
• a private storage unit for storing data kept secret;
• a control module connected to the storage module and the interface module, comprising:
• a direct access unit for controlling an external device to access data stored in the public storage unit;
• a storage isolating firmware unit for stopping the external device from unauthorized accessing the private storage unit;
• and
• a virtual machine operating system unit for installing some applications according to the requirements of user, and performing the applications in a protected mode combined with the storage isolating firmware unit;
• a host device connected to the interface module for displaying two work interfaces of the storage device, wherein the two work interfaces are a direct access work interface being used for accessing data of the public storage unit and a virtual machine operating system work interface being used for accessing data of private storage unit;
• wherein the host device sends an instruction of accessing data stored in the private stored to the storage device by the virtual machine operating system work interface, the virtual machine operating system unit combined with the storage isolating firmware unit authenticates the instruction;
• if the instruction being pass authentication, the host device will be allowed to access the private storage unit;
• otherwise, the host machine is not allowed to access the private storage unit.