Storage device and method for protecting data stored therein

A method of protecting data stored in a storage device, which comprises:

• a host interface to be connected to a terminal host;
• a control module, which is connected to the host interface and comprises a microprocessor, a random access memory (RAM) serving as a working memory for data processing, and a read only memory (ROM) storing firmware to make the storage device work and a program code for minutiae data matching;
• a biometrics sensor, which is unremovably connected to the control module, for sensing template biometrics data of an authorized user;
• and a memory module, which is unremovably connected to the control module and divided into a public block, a private block for storing to-be-protected data and a hidden block, the method comprising, after the storage device is electrically connected to the terminal host, the steps of:
• enabling the control module to communicate with the terminal host through the host interface, and enabling the terminal host to automatically run one application program stored in the public block;
• and
• entering an enrolling mode or an authentication mode, wherein:
• in the enrolling mode:
• the terminal host informs the control module to control the biometrics sensor to read the template biometrics data of the authorized user and transfer the template biometrics data to the terminal host;
• and
• the terminal host processes the template biometrics data, generates template minutiae data using the application program, and transmits the template minutiae data to the hidden block for storage;
• and
• in the authentication mode:
• the microprocessor of the control module loads the template minutiae data;
• the terminal host informs the control module to control the biometrics sensor to read to-be-recognized biometrics data of a user and transfer the to-be-recognized biometrics data to the terminal host;
• the terminal host processes the to-be-recognized biometrics data, generates to-be-recognized minutiae data and transfers the to-be-recognized minutiae data back to the microprocessor using the application program;
• and
• the microprocessor judges whether or not the template minutiae data substantially match with the to-be-recognized minutiae data using the program code, and enables the private block to be accessed by the terminal host when the template minutiae data substantially match with the to-be-recognized minutiae data, or disables the private block from being accessed by the terminal host when the template minutiae data do not match with the to-be-recognized minutiae data.