Secure portable data transport and storage system

A portable data transport device that provides security to data stored therein, and is configured to communicate data with a host computer, the portable data transport device comprising:

• a first processor configured for communication with the host computer to which the portable data transport device is connected, the first processor configured to block mounting of the portable data transport device to the host computer until the first processor receives a data key match;
• a non-volatile memory in which is stored a confirming data key and data representing a physical parameter of an enrolled user of the portable data transport device;
• a biometric processor in communication with the non-volatile memory;
• and
• a biometric reader disposed as part of the portable data transport device and disposed in communication with the biometric processor, the biometric reader configured to read a predetermined physical parameter of a person and provide data representing the physical parameter that was read;
• wherein the biometric processor is configured to receive the data representing the read physical parameter, compare it to stored data representing a physical characteristic of the enrolled user stored in the non-volatile memory, and if a match results, output the confirming data key from the non-volatile memory;
• wherein the first processor is configured to receive the output confirming data key from the biometric processor, compare the received confirming data key with a stored reference data key, and if a match is found, cease blocking the mounting of the portable data transport device to the connected host computer;
• wherein the biometric reader comprises a unique biometric reader identifier code;
• the non-volatile memory stores a reference biometric reader identifier code for the biometric reader;
• the biometric processor is configured to process physical parameter data from the reader only after it has:
• read the unique identifier code from the biometric reader,
• compared it to the reference biometric reader identifier code stored in the non-volatile memory, and
• found a match between the two identifier codes;
• wherein the portable data transport device comprises:
• an embedded product identifier;
• and
• executable operational software having an associated identifier;
• the software is configured to apply a hash function comprising the embedded product identifier and the software identifier to create a hash value;
• the portable data transport device compares the created hash value against a current hash value stored in the portable data transport device and if a match is found, the portable data transport device permits both read and write operations to occur;
• wherein the portable data transport device further comprises:
• firmware and associated firmware memory that is accessible only to the firmware, wherein the current hash value is stored in the firmware memory;
• and
• an encryption/decryption program having an associated identifier;
• the software is configured to run the hash function further comprising the encryption/decryption program identifier;
• the firmware compares the created hash value against the current hash value stored in the firmware memory and if a match is found, the firmware removes write protection from the portable data transport device;
• and
• neither the comparison between data keys nor the comparison between hash function values can be overridden or otherwise avoided, and the received confirming data key must match with the stored reference data key and the created hash function value must match with a stored current hash function value before read and write operations on the portable data transport device are permitted.