Information processing device, external storage device, host device, relay device, control program, and control method of information processing device

According to the embodiments, an external storage device switches to an interface controller for supporting only a read operation of nonvolatile memory when a shift condition for shifting to a read only mode is met. A host device switches to an interface driver for supporting only the read operation of the nonvolatile memory when determining to recognize as read only memory based on information acquired from the external storage device.

FIELD

Embodiments described herein relate generally to an information processing device, an external storage device, a host device, a relay device, a control program, and a control method of information processing device.

BACKGROUND

As an external storage device used in a computer system, an SSD (Solid State Drive) mounted with a nonvolatile semiconductor memory such as a NAND-type flash memory attracts attention. The flash memory has advantages such as high speed and light weight compared with a magnetic disk device. The SSD includes a plurality of flash memory chips, a controller that performs read/write control for the respective flash memory chips in response to a request from a host apparatus, a buffer memory for performing data transfer between the respective flash memory chips and the host apparatus, a power supply circuit, and a connection interface to the host apparatus.

DETAILED DESCRIPTION

In general, according to one embodiment, an information processing device includes a host device and an external storage device. The external storage device includes nonvolatile memory that enables read and write, an interface controller to be connected to the host device, and a first control unit. The interface controller determines whether or not a shift condition for shifting to the read only mode for causing the nonvolatile memory to perform only the read operation is met, and when the shift condition is met, the first control unit switches the interface controller from a first interface controller to a second interface controller. The host device includes an interface driver for operating the external storage device, and a second control unit. The second control unit determines whether or not to recognize the nonvolatile memory as read only memory in which only the read operation can be carried out based on the information acquired from the external storage device, and switches the interface driver from a first interface driver to a second interface driver when determined to recognize as the read only memory. When the external storage device determined to be recognized as read only memory is connected to the host device, the host device selects the second interface driver; and the external storage device selects the second interface controller, whereby the host device recognizes the external storage device as a read only memory without issuing a write request to the external storage device.

When data is stored in a nonvolatile semiconductor storage element such as a NAND-type flash memory, writing is performed after once erasing data in units of block, reading/writing is performed in units of page, or a unit of erasing/reading/writing is fixed. On the other hand, a unit for a host apparatus such as a personal computer to write data in and read out the data from a secondary storage device such as a hard disk is called sector. The sector is set independently from a unit of erasing, writing, and readout of a semiconductor storage device. For instance, the unit of erase/write/read of the nonvolatile semiconductor memory may be greater than the unit of write/read of the host device.

When configuring the secondary storage device of the personal computer using the flash memory, a block (defective block, bad block) that cannot be used as a storage region due to reasons of many errors, and a region (defective region) that cannot be read may generate. If the number of defective blocks or the number of defective regions exceed the upper limit value, a new defective block or a defective region cannot be registered and both the data stored in the buffer memory (cache memory) and the data to which the write request is made cannot be guaranteed to be written to the flash memory. Thus, when the number of defective blocks or the number of defective regions exceed a predetermined value, the write of data may suddenly become disabled although there is free space in the flash memory.

As a solution thereto, there is a method of managing the number of bad clusters and the number of bad blocks generated in the NAND type flash memory, and switching the operation mode of when writing the data from the host device to the NAND type flash memory according to the number of bad clusters and the number of bad blocks. The cluster is a management unit serving as a logical address in the SSD. The cluster size is a natural number multiples of two or greater of the sector size, and the cluster address is configured by a bit sequence of high order from a predetermined bit of an LBA.

In this method, the operation mode of the SSD is divided into the following three modes.

WB mode (Write Back Mode): normal operation of once writing data to the cache memory, and removing the same to the NAND type flash memory based on a predetermined condition.

WT mode (Write Through Mode): operation mode of writing data written to the cache memory to the NAND type flash memory each time with one write request. The data written from the host is guaranteed as much as possible by writing to the NAND type flash memory each time. The SSD transitions to the WT mode when the number of remaining entries of the bad cluster table or the bad block table becomes smaller than or equal to a predetermined number.

RO mode (Read Only Mode): mode of prohibiting all processes involving write to the NAND type flash memory. The data already written from the host is guaranteed as much as possible when the SSD comes close to the end of its lifespan by returning an error respect to all the write requests from the host so as not to perform write. The SSD transitions to the RO mode when the number of remaining entries of the bad cluster table or the bad block table becomes smaller than or equal to a predetermined number or when the free block is insufficient.

In the WB mode and the WT mode, the SSD accepts both the read request and the write request from the host, and processes the same. In the RO mode, the SSD accepts the read request from the host and processes the same, but does not process the write request from the host and returns an error.

The host transmits the write request to the SSD when the SSD is connected to the host mounted with the operating system (OS) such as Windows (registered trademark), and the host recognizes the SSD as an available external storage device when the write request is normally processed.

If the host transmits the write request to the SSD when the SSD that transitioned to the RO mode is connected to the host mounted with the Windows (registered trademark), the SSD returns an error to the host and hence the host may not recognize the SSD as an available external storage device. Therefore, the data recorded in the past may not be read from the SSD even if the SSD in the RO mode in which read is enabled is connected to the host.

In the present embodiment, the SSD that shifted to the RO mode can be normally recognized by the host as a device in which only the read operation can be carried out.

Exemplary embodiments of an information processing device, an external storage device, a host device, a relay device, and a control method of the information processing device will be explained below in detail with reference to the accompanying drawings. The present invention is not limited to the following embodiments.

First Embodiment

FIG. 1illustrates a configuration of a first embodiment of a computer system. The computer system1is configured by an SSD10serving as an external storage device, a host100, and an ATA interface90serving as a memory interface connecting the SSD10and the host100. The external storage device may be other readable and writable nonvolatile storage device other than the SSD10such as a hard disc drive, a hybrid hard disc drive, USB memory, or an SD card. The host100may be a personal computer, may be an imaging device such as a still camera or a video camera, or may be a tablet computer, a smart phone, a game machine, a car navigation system, or the like.

As illustrated inFIG. 1, the SSD10includes NAND type flash memory (hereinafter abbreviated as NAND memory)20serving as nonvolatile semiconductor memory, an interface controller30for transmitting and receiving signals with the host100through the ATA interface90, RAM (Random Access Memory)40serving as volatile semiconductor memory including cache memory (CM)40afunctioning as an intermediate buffer of the interface controller30and the NAND memory20, a memory controller50responsible for the management and control of the NAND memory20and the RAM40, and the control of the interface controller30, an IPL (Initial Program Loader)55serving as a boot loader for performing various types of startup process including initialization at the time of startup of the SSD10, an ECC correction circuit58for executing an error correction process of the data read out from the NAND memory20, and a bus57for connecting all the constituent elements. The IPL55may be arranged in the memory controller50. In this embodiment, the ATA interface is configured as a Serial ATA (SATA) interface. Other interfaces such as the Parallel ATA (PATA) interface may be used in place of the SATA interface90. Other interfaces such as the USB (Universal Serial Bus) interface, the PCI Express interface, the Thunderbolt (registered trademark) interface, or the Serial Attached SCSI (SAS) interface may be used in place of the ATA interface90.

DRAM (Dynamic Random Access Memory), SRAM (Static Random Access Memory), FeRAM (Ferroelectric Random Access Memory), MRAM (Magnetoresistive Random Access Memory), PRAM (Phase Change Random Access Memory), or the like may be adopted for the RAM40. The RAM40may be arranged in the memory controller50.

The NAND memory20stores therein user data specified by the host100, stores the management table in which the user data is managed, and stores the management information managed in the RAM40for backup. The NAND memory20includes a memory cell array in which a plurality of memory cells is arrayed in a matrix form, where each memory cell can store multiple values using an upper page and a lower page. The NAND memory20is configured by a plurality of memory chips, and each memory chip is configured by arraying a block or a unit of data erasing in plurals. In the NAND memory20, writing and reading of data is performed in page units. The block consists of a plurality of pages.

FIG. 2illustrates an internal configuration example of the NAND memory chip configuring the NAND memory20. The NAND memory20includes one or more NAND memory chips20080. The NAND memory chip20080includes a memory cell array in which a plurality of memory cells is arrayed in a matrix form. The memory cell transistor configuring the memory cell array is configured by a MOSFET (Metal Oxide Semiconductor Field Effect Transistor) having a stacked gate structure formed on a semiconductor substrate. The stacked gate structure includes a charge accumulating layer (floating gate electrode) formed on the semiconductor substrate with a gate insulating film interposed, and a control gate electrode formed on the floating gate electrode with an inter-gate insulating film interposed. The memory cell transistor has the threshold value voltage changed according to the number of electrons accumulated in the floating gate electrode, and stores the data according to the difference in the threshold value voltage. In the present embodiment, a case in which the individual memory cell is the write method of the four-value storage method of 2 bit/cell using the upper page and the lower page has been described, but the essence of the present invention is not changed even in a case in which the individual memory cell is the write method of the two-value storage method of 1 bit/cell using a single page or the write method of the eight-value storage method of 3 bit/cell using the upper page, the middle page, and the lower page. The memory cell transistor is not limited to the structure including the floating gate electrode, and may be a structure in which the threshold value voltage can be adjusted by trapping the electrons at the nitride interface serving as the charge accumulating layer such as MONOS (Metal-Oxide-Nitride-Oxide-Silicon). The MONOS type memory cell transistor may be similarly configured to store one bit or may be configured to store multiple values. Furthermore, a semiconductor storage medium in which the memory cell is arranged three-dimensionally as described in U.S. Patent Application Publication No. 2010 0172189 and U.S. Patent Application Publication No. 2010 0254191 may be adopted for the nonvolatile storage medium.

As illustrated inFIG. 2, the NAND memory chip20080includes a memory cell array20082in which a memory cell for storing data is arranged in a matrix form. The memory cell array20082includes a plurality of bit lines, a plurality of word lines, and a common source line, where the memory cell in which data is electrically rewritable is arranged in a matrix form at the intersection of the bit line and the word line. A bit control circuit20083for controlling the bit line and a word line control circuit20085for controlling the word line voltage are connected to the memory cell array20082. In other words, the bit line control circuit20083reads out the data of the memory cell in the memory cell array20082through the bit line, and applies a write control voltage to the memory cell in the memory cell array20082through the bit line to carry out write to the memory cell.

A column decoder20084, a data input/output buffer20089and a data input/output terminal20088are connected to the bit line control circuit20083. The data of the memory cell read out from the memory cell array20082is output to the outside from the data input/output terminal20088through the bit line control circuit20083and the data input/output buffer20089. The write data externally input to the data input/output terminal20088is input to the bit line control circuit20083by the column decoder20084through the data input/output buffer20089, and the write to the specified memory cell is carried out.

The memory cell array20082, the bit line control circuit20083, the column decoder20084, the data input/output buffer20089, and the word line control circuit20085are connected to a control circuit20086. The control circuit20086generates a control signal and a control voltage for controlling the memory cell array20082, the bit line control circuit20083, the column decoder20084, the data input/output buffer20089, and the word line control circuit20085according to the control signal input to the control signal input terminal20087. The circuit portion other than the memory cell array20082of the NAND memory chip20080is called the NAND controller (NANDC)20081.

FIG. 3illustrates a configuration of the memory cell array20082illustrated inFIG. 2. The memory cell array20082is an NAND cell type memory cell array, and is configured to include a plurality of NAND cells. One NAND cell is configured by a memory string MS including memory cells connected in series, and selection gates S1, S2connected to both ends thereof. The selection gate S1is connected to the bit line BL, and the selection gate S2is connected to the source line SRC. The control gate of the memory cell MC arranged in the same row is commonly connected to the word lines WL0to WLm−1. The first selection gate S1is commonly connected to the select line SGD, and the second selection gate S2is commonly connected to the select line SGS.

The memory cell array20082includes one or a plurality of planes, and the plane includes a plurality of blocks. Each block is configured by a plurality of NAND cells, and the data is erased in units of blocks.

The plurality of memory cells connected to one word line configure one physical sector. The data is written and read out for every physical sector (physical sector is irrelevant to the logical sector of the LBA to be described later). The data worth two pages is stored in one physical sector in the case of the 2 bit/cell write method (four value). The data worth one page is stored in one physical sector in the case of the 1 bit/cell write method (two value), and the data worth three pages is stored in one physical sector in the case of the 3 bit/cell write method (eight value).

At the time of read operation, the program verify operation, and the program operation, one word line is selected and one physical sector is selected according to the physical address received from the memory controller50. The switching of the page in the physical sector is carried out by the physical address. In the present embodiment, the NAND memory20is a 2 bit/cell write method, and the memory controller50handles assuming that two pages, the upper page and the lower page, are assigned as physical pages to the physical sector, where the physical address is assigned to all pages.

The four value NAND memory of 2 bit/cell is configured such that the threshold value voltage in one memory cell has four ways of distribution.FIG. 4illustrates the relationship between the four value data (data “11”, “01”, “10”, “00”) of two bits stored in the memory cell of the four value NAND cell flash memory and the threshold value voltage distribution of the memory cell. InFIG. 4, VA1is the voltage applied to the selected word line when reading out two data with respect to the physical sector in which only the lower page is written and the upper page is not yet written, and VA1Vindicates the verify voltage applied to verify whether or not the write is completed when carrying out write to the A1.

VA2, VB2, VC2are voltages applied on the selected word line when reading out four data with respect to the physical sector in which the lower page and the upper page are written, and VA2V, VB2V, VC2Vindicate the verify voltage applied to verify whether or not the write is completed when carrying out write to each threshold value voltage distribution. Vread1, Vread2indicate read voltages applied to the non-selected memory cell in the NAND cell to conduct the relevant non-selected memory cell regardless of the held data when carrying out readout of the data. Furthermore, Vev1, Vev2indicate erase verify voltages applied to the memory cell to verify whether or not the erasure is completed when erasing the data of the memory cell, and have a negative value. The magnitude is determined in view of the influence of the interference of the adjacent memory cell. The magnitude relationship of each voltage is,
Vev1<VA1<VA1V<Vread1
Vev2<VA2<VA2V<VB2<VB2V<VC2<VC2V<Vread2.

The erase verify voltages Vev1, Vev2, Vev3take negative values, as described above, but the voltage actually applied to the control gate of the memory cell MC in the erase verify operation is not a negative value, and is zero or a positive value. That is, in the actual erase verify operation, a positive voltage is applied on the back gate of the memory cell MC, and a voltage having a value of zero or a positive value smaller than the back gate voltage is applied on the control gate of the memory cell MC. In other words, the erase verify voltages Vev1, Vev2, Vev3are voltages that equivalently have a negative value.

The threshold value voltage distribution ER of the memory cell after the block erasure has an upper limit value of a negative value, and is assigned with data “11”. The memory cell of the data “01”, “10”, and “00” in a state the lower page and upper page are written each has a positive threshold value voltage distribution A2, B2, C2(lower limit value of A2, B2, C2is also a positive value), where the threshold value voltage distribution A2of data “01” has the lowest voltage value, the threshold value voltage distribution C2of data “00” has the highest voltage value, and the voltage values of various types of threshold value voltage distributions have a relationship of A2<B2<C2. The memory cell of data “10” in a state the lower page is written and the upper page is not written has a positive threshold value voltage distribution A1(lower limit value of A1is also a positive value). The threshold value voltage distribution illustrated inFIG. 4is merely an example, and the present invention is not to be limited thereby. For instance, the threshold value voltage distributions A2, B2, C2are all explained to be positive threshold value voltage distributions inFIG. 4, but a case in which the threshold value voltage distribution A2is a distribution of negative voltage and the threshold value voltage distributions B2, C2are distributions of positive voltages is also encompassed within the scope of the invention. Even if the threshold value voltage distributions ER1, ER2are positive values, the present invention is not to be limited thereby. In the present embodiment, the correspondence relationship of the data of ER2, A2, B2, C2is described as “11”, “01”, “10”, “00”, but may be other correspondence relationships such as “11”, “01”, “00”, “10”.

The two bit data of one memory cell includes the lower page data and the upper page data, where the lower page data and the upper page data are written to the memory cell through different write operations, that is, two write operations. Notating the data as “*@”, * represents the upper page data and @ represents the lower page data.

First, the write of the lower page data will be described with reference to the first stage to the second stage ofFIG. 4. All the memory cells are assumed to have the threshold value voltage distribution ER in the erasure state, and store the data “11”. As illustrated inFIG. 14, when the write of the lower page data is carried out, the threshold value voltage distribution ER of the memory cell is divided into two threshold value voltage distributions (ER1, A1) according to the value (“1” or “0”) of the lower page data. If the value of the lower page data is “1”, the threshold value voltage distribution ER of the erasure state is maintained and hence ER1=ER, but may be ER1>ER.

If the value of the lower page data is “0”, high electric field is applied on the tunnel oxide film of the memory cell, electrons are injected to the floating gate electrode, and the threshold value voltage Vth of the memory cell is raised by a predetermined amount. Specifically, the verify potential VA1V is set, and the write operation is repeated until reaching the threshold value voltage of greater than or equal to the verify voltage VA1V. As a result, the memory cell changes to the write state (data “10”). If the threshold value voltage is not reached even if the write operation is repeated for a predetermined number of times (or if number of memory cells that has not reached the threshold value voltage is greater than or equal to a predetermined value), the write status with respect to the physical page becomes “write error”.

The write of the upper page data will now be described with reference to the second stage to the third stage ofFIG. 4. The write of the upper page data is carried out based on the write data (upper page data) input from the exterior of the chip, and the lower page data already written to the memory cell.

In other words, as illustrated in the second stage to the third stage ofFIG. 4, if the value of the upper page data is “1”, the high electric field is prevented from being applied to the tunnel oxide film of the memory cell thus preventing the rise of the threshold value voltage Vth of the memory cell. As a result, the memory cell of data “11” (threshold value voltage distribution ER1of erasure state) maintains the data “11” as is (ER2), and the memory cell of the data “10” (threshold value voltage distribution A1) maintains the data “10” as is (B2). However, it is desirable to adjust the lower limit value of the threshold value voltage distribution using the positive verify voltage VB2Vgreater than the verify voltage VA1Vthus forming the threshold value voltage distribution B2in which the width of the threshold value voltage distribution is narrowed from the standpoint of ensuring the voltage margin between each distribution. If the threshold value voltage is not reached even if the lower limit value adjustment is repeated for a predetermined number of times (or if number of memory cells that has not reached the threshold value voltage is greater than or equal to a predetermined value), the write status with respect to the physical page becomes “write error”.

If the value of the upper page data is “0”, the high electric field is applied to the tunnel oxide film of the memory cell, the electrons are injected to the floating gate electrode, and the threshold value voltage Vth of the memory cell is raised by a predetermined amount. Specifically, the verify potentials VA2V, VC2Vare set, and the write operation is repeated until reaching the threshold value voltage of greater than or equal to the verify voltage VA1V. As a result, the memory cell of the data “11” (threshold value voltage distribution ER1of erasure state) changes to the data “01” of the threshold value voltage distribution A2, and the memory cell of data “10” (A1) changes to data “00” of the threshold value voltage distribution C2. In this case, the lower limit value of the threshold value voltage distributions A2, C2is adjusted using the verify voltages VA2V, VC2V. If the threshold value voltage is not reached even if the write operation is repeated for a predetermined number of times (or if number of memory cells that has not reached the threshold value voltage is greater than or equal to a predetermined value), the write with respect to the physical page becomes “write error”.

In the erasure operation, the erase verify potential Vev is set, and the erasure operation is repeated until the threshold value voltage of smaller than or equal to the verify voltage Vev. As a result, the memory cell changes to the erasure state (data “11”). If the threshold value voltage is not reached even if the erasure operation is repeated for a predetermined number of times (or if number of memory cells that has not reached the threshold value voltage is greater than or equal to a predetermined value), the erase status with respect to the physical page becomes “erase error”.

One example of the data write method in the typical four value storage method is as described above. The basic operation is similar in the multi-bit storage method of three or more bits as the operation of dividing the threshold value voltage distribution in eight or more ways according to the upper page data is simply added with respect to the operation described above.

The RAM40includes cache memory (CM)40afunctioning as a data transfer cache between the host100and the NAND memory20. The RAM40functions as management information storage memory and work region memory. The management table managed by the RAM40is realized by extracting various types of management tables stored in the NAND memory20at the time of startup, and is evacuated and saved in the NAND memory20periodically or at the time of power disconnection.

The memory controller50has the function thereof realized by a processor for executing a system program (firmware) stored in the NAND memory20, various types of hardware circuits, and the like, and executes the data transfer control between the host100and the NAND memory20with respect to various types of commands such as the write request, the cache flash request, and the read request from the host100, the update and management of various types of management tables stored in the RAM40and the NAND memory20.

When issuing the read request or the write request, the host100outputs LBA (Logical Block Addressing) serving as a logical address to the SSD10through the ATA interface90. LBA is a logical address in which serial numbers from zero are attached to logical sectors (size: e.g., 512 B). When using the read request or the write request, the host100outputs the sector size corresponding to the target of read request or the write request along with the LBA to the SSD10.

The interface controller30includes a read/write mode interface controller (hereinafter abbreviated as RWIF controller)31such as the ATA controller used in the normal operation mode in which read/write are enabled, a read only mode interface controller (hereinafter abbreviated as ROIF controller)32such as the ATAPI (ATA Packet Interface) controller or a controller of the read only media standard used in the read only mode in which only data reading of data reading and data writing is permitted, and selection switches33,34capable of selecting either one of the RWIF controller31or the ROIF controller32.

The selection switch33exclusively selects either one of the RWIF controller31or the ROIF controller32and connects the same to the ATA interface90, and the selection switch34exclusively selects either one of the RWIF controller31or the ROIF controller32and connects the same to the bus57. In the selection state of the RWIF controller31, the selection switch33causes the ATA interface90and the RWIF controller31to be in an electrically connected state, and the switch34causes the bus57and the RWIF controller31to be in an electrically connected state. In the selection state of the ROIF controller32, the selection switch33causes the ATA interface90and the ROIF controller32to be in an electrically connected state, and the switch34causes the bus57and the ROIF controller32to be in an electrically connected state.

The RWIF controller31is desirably configured to explicitly indicate to the host100that the SSD10is the ATA device. For instance, in the Device Signature described in ATA/ATAPI Command Set-2 (ACS-2), LBA(7:0) is output to 01h, LBA(15:8) to 00h, and LBA(23:16) to the host100as 00h, so that notification can be made to the host100that the SSD10is the ATA device. The ROIF controller32is desirably configured to explicitly indicate to the host100that the SSD10is the ATAPI device. For instance, in the Device Signature described in ACS-2, LBA(7:0) is output to 01h, LBA(15:8) to 14h, and LBA(23:16) to the host100as EBh, so that notification can be made to the host100that the SSD10is the ATAPI device.

The ROIF controller32is configured to notify the host100that the SSD10does not support the write command and is read only. For instance, when receiving the command GET CONFIGURATION (46h) adopted in the INCITS Multi-Media Commands-6 (MMC-6) from the host100through the ATA interface90, the ROIF controller32returns to the host100that all the write functions are non-supportive in the features such as Random Writable (Feature Number=0020h), Incremental Streaming Writable (Feature Number=0021h), Write Once (Feature Number=0025h), and the like. Therefore, the SSD10can be recognized as a readable device even if the host100side is using the Windows (registered trademark) and the like for the OS. On the other hand, the ROIF controller32may be configured to explicitly indicate to the host100that the SSD10is the ATA device, similar to the RWIF controller31, and may be configured to return to the host100that all the write functions are non-supportive when receiving the device identification information such as the command ECh IDENTIFY DEVICE described in ACS-2 from the host100through the ATA interface90. The method of notifying whether or not the SSD10is a read only device may take various other forms.

The functions of the interface controller30and the various controllers included therein may all be mounted as hardware such as LSI, or may have one part or all mounted as software such as firmware. The firmware is saved in the NAND memory20when the power supply of the SSD is turned OFF, but is read out by the IPL55to the RAM40or the memory controller50at the startup of the power supply of the SSD when being mounted as the firmware.

The RWIF controller31has a function of receiving the read request, the write request, and other requests and data from the host100, transmitting the received requests and data to the memory controller50, and transmitting the data to the RAM40by the control of the memory controller50. The RWIF controller31also transmits identification information that it is a readable and writable device to the host100when receiving a transmission request for device identification information from the host100.

The ROIF controller32has a function of receiving the read request, other requests excluding the write request, and data from the host100, transmitting the received requests and data to the memory controller50, and transmitting the data to the RAM40by the control of the memory controller50. The ROIF controller21also transmits device identification information that it does not support write to the host100when receiving a transmission request for device identification information from the host100. Thus, the host100recognizes that the SSD10does not support write, and hence the write request will not be transmitted from the host100to the SSD10. When the write request is transmitted from the host100to the SSD10after transmitting the device identification information that it does not support write to the host100, the ROIF controller32may return an error to the host100. The ROIF controller32carries out processes similar to the RWIF controller31with respect to the command that does not involve the write operation of the NAND memory20.

The IPL55is started when the power of the SSD10is turned ON and performs the initialization process of the NAND memory20, the RAM40, the memory controller50, and the interface controller30. In this case, the IPL55reads out the management information of the NAND memory20from the NAND memory20or the RAM40. The IPL55determines whether or not the read only mode shift condition is met based on the read management information, that is, whether or not the SSD10is in a state to be used in the normal operation mode or in a state to be used in the read only mode. If determined as the normal mode, as a result of the determination, the IPL55sets the selection switches33,34to select the RWIF controller31, and causes the ROIF controller32to be in a non-selected state. If determined that the SSD10is in a state to be used in the read only mode based on the read management information, the IPL55sets the selection switches33,34to select the ROIF controller32, and causes the RWIF controller31to be in a non-selected state. The read only mode shift condition will be described in detail later.

The memory controller50desirably determines whether or not the read only mode shift condition for shifting to the read only mode state is met even while the SSD10is operating in the normal readable/writable state, and executes the read only mode shift process, to be described later, when the read only mode shift condition is met while the SSD10is operating in the normal state. The interface controller30consequently switches to the ROIF controller32according to the read only mode shift process.

The configuration of the host100will now be described. The host100includes an operating system (OS)150, an SSD control tool110, and an interface driver120for the SSD10. The interface driver120includes a read/write mode interface driver (hereinafter abbreviated as RWIF driver)121such as the ATA driver used when the SSD10is in the normal operation mode in which read/write are enabled, a read only mode interface driver (hereinafter abbreviated as ROIF driver)122such as the read only driver of the ATAPI driver used when the SSD10is in the read only mode, and selection switches123,124for selecting the driver to be applied on the SSD10by the RWIF driver121and the ROIF driver122. The SSD control tool110can select the driver to be applied on the SSD10from either one of the RWIF driver121or the ROIF driver122or may have both drivers in the non-selected state through the selection switches123,124. The software140is software other than the SSD control tool110, and is software that uses the SSD10.

As illustrated inFIG. 5, the SSD control tool110is stored as the SSD control tool110A in the region of the NAND memory20of the SSD10when the power supply of the host100is turned OFF, but is loaded from the NAND memory20to main memory202at the startup of the host100or the startup of the program. As illustrated inFIG. 6, if a plurality of external storage devices is connected to the host100, the SSD control tool110may be stored in a region of the external storage device300different from the SSD10as a SSD control tool100B, and may be loaded from the external storage device300to the main memory202at the startup of the host100or the startup of the program. In particular, if the external storage device300is used as a system drive for storing the OS150, and the SSD10is used as a data drive for storing user data such as documents, still image data, and moving image data, it is desirable to store the SSD control tool110in the external storage device300serving as the system drive from the standpoint of clearly separating the roles of the drive10and the drive300such as using the external storage device300serving as the system drive as a drive for mainly storing the OS and the application program and using the SSD10serving as the data drive as a drive for storing the user data.

As illustrated inFIG. 5andFIG. 6, it is desirable for the computer system1to be shipped with the SSD control tool110stored in the SSD10or the external storage device300, put on the shelves, and provided to the user from the standpoint of saving the effort of the user in carrying out the setup of the SSD control tool110. From the standpoint of enabling the user to select whether or not to install the SSD control tool and from the standpoint of providing the most recent SSD control tool to the user, the SSD control tool is desirably stored in the SSD10or the external storage device300by being downloaded from the WEB or installed from an external storage medium such as a DVD-ROM, USB memory, or the like.

FIG. 7illustrates one example of a case of downloading the SSD control tool from the WEB. InFIG. 7, a SSD control tool110C is stored in a storage medium400in a WEB server, and the SSD control tool110C is downloaded to the SSD10or the external storage device300through the LAN controller208or the like via a network such as the Internet, local network, and wireless LAN.

FIG. 8illustrates one example of a case of installing the SSD control tool from an optical medium such as a DVD-ROM or a CD-ROM. An SSD control tool110D is stored in the optical medium500such as the DVD-ROM or the CD-ROM, and the optical medium500is set in the optical drive206, so that the SSD control tool110D is installed in the SSD10or the external storage device300through the optical drive206.

FIG. 9illustrates one example of a case of installing the SSD control tool from the USB memory. An SSD control tool110E is stored in USB memory600, where the SSD control tool110E is installed in the SSD10or the external storage device300through the USB controller209by connecting the USB memory600to the USB controller209. Other external memories such as an SD card may, of course, be used instead of the USB memory600. The optical medium500and the USB memory600are desirably packaged with the SSD10as accessories at the time of shipment of the SSD10from the standpoint of facilitated availability by the user. The optical medium500or the USB memory600may be sold alone as software product or may be attached as a supplement to magazines and books.

The selection switch124exclusively selects either one of the RWIF driver121or the ROIF driver122and connects the same to the ATA interface90, and the selection switch123exclusively selects either one of the RWIF driver121or the ROIF driver122and connects the same to the software140. In the selection state of the RWIF driver121, the selection switch124causes the ATA interface90and the RWIF driver121to be in a connected state, and the switch123causes the software140and the RWIF driver121to be in a connected state. In the selection state of the ROIF driver122, the selection switch124causes the ATA interface90and the ROIF driver122to be in a connected state, and the switch123causes the software and the ROIF driver122to be in a connected state.

FIG. 10illustrates an outer appearance configuration of the computer system1.FIG. 10illustrates a configuration of a general desk top type personal computer. The SSD10is physically connected to the motherboard130through an SATA cable serving as the ATA interface90, and electrically connected to the CPU (not illustrated) attached on the motherboard130through the south bridge mounted on the motherboard130. The SSD10is connected to a power supply circuit132through a power supply cable131. A display133, a keyboard134, a mouse135, and the like are connected to the motherboard130. The computer system is not limited to a desk top type, and is applicable to a laptop type of a notebook type personal computer.

FIG. 11illustrates a system configuration example of the host100mounted with the SSD10. The host100includes a CPU200, a north bridge201, main memory202such as DRAM, a display controller203, a display133, a south bridge205, an optical drive205, BIOS-ROM207, a LAN controller208, a USB controller209, a keyboard134, a mouse135, and the like.

The CPU200is a processor arranged to control the operation of the computer system, and executes the operating system (OS) loaded from the SSD10to the main memory202. Furthermore, when the optical drive206enables the execution of at least one process of the read process and the write process with respect to the loaded optical disc, the CPU200executes such processes.

The CPU200also executes system BIOS (Basic Input Output System) stored in the BIOS-ROM207. The system BIOS is a program for hardware control in the computer system.

The north bridge201is a bridge device connected to the local bus of the CPU200. The north bridge201incorporates a memory controller for access controlling the main memory202. The north bridge201also has a function of executing communication and the like with the display controller203.

The main memory202temporarily stores programs and data, and functions as a work area of the CPU200. The main memory202is configured by DRAM and the like.

The video controller203is a video reproduction controller for controlling the display133of the computer system.

The south bridge205is a bridge device connected to the local bus of the CPU200. The south bridge205controls the SSD10or the storage device for storing various types of software and data through the ATA interface90.

In the computer system, the access to the SSD10is made in units of logical sectors. The write command (write request), the read command (read request), the flash command, and the like are input to the SSD10through the ATA interface90.

The south bridge205also has a function for access controlling the BIOS-ROM207, the optical drive206, the LAN controller208, and the USB controller209. The keyboard134and the mouse135are connected to the USB controller209.

InFIG. 11, the OS150, the SSD control tool110, the interface driver120including the RWIF driver121, the ROIF driver122and the like, and the software140are saved in the SSD10when the power supply of the computer system is turned OFF, and loaded from the SSD10to the main memory202when the power supply of the host is turned ON or when such functions are called out. The interface driver120loaded on the main memory202is read to the CPU200through the north bridge201, and the CPU200performs the control of the SSD10through the south bridge205based on the information of the read interface driver.

FIG. 12illustrates a hierarchical structure of various types of elements of the computer system. The SSD control tool110and the software140normally do not directly communicate with the SSD10, and communicate with the SSD10through the OS150and the interface driver120. If a need for the SSD control tool110and the software140to transmit a command such as the read request and the write request to the SSD10arises, the SSD control tool110and the software140transmit the access request in units of files to the OS150. The OS150references the file management table or metadata included in the OS150, specifies the logical address (LBA) of the SSD10corresponding to the file to which the access request is made, and transmits the command including the corresponding LBA to the interface driver120. The interface driver120converts the command from the OS150to a command unique to the relevant interface, and transmits the same to the SSD.

If a response is returned from the SSD10, the interface driver120converts the response unique to the relevant interface to the command of the OS150, and transmits the same to the OS150. The OS150specifies to which response on which software the response after the conversion corresponds, and returns the response to the specified software.

The SSD control tool110can directly access the interface driver120without interposing the OS150. The SSD control tool110can exclusively select which of the RWIF driver121or the ROIF driver122of the interface driver is valid by directly accessing the interface driver. If the RWIF driver121is valid, the RWIF driver121relays the OS150and the SSD10, and the ROIF driver122does not perform anything. If the ROIF driver122is valid, the ROIF driver122relays the OS150and the SSD10, and the RWIF driver121does not perform anything. The SSD control tool110may alternatively select the RWIF driver121and the ROIF driver122through the OS150.

The SSD control tool110acquires the device identification information of the SSD from the SSD110at the time of startup of the host or at the time of the SSD connection. Whether the SSD10is a readable and writable device or a write non-supporting device is determined based on the device identification information, and the switching setting of the interface driver120is carried out based on the determination result. The RWIF driver121is made valid if determined that the SSD10is the readable and writable device, and the ROIF driver122is made valid if determined that the SSD10is the write non-supporting device. The SSD control tool110determines that the SSD10switched to the read only mode if the response from the SSD10with respect to the write request is an error, and restarts the SSD10and switches the interface driver120from the RWIF driver121to the ROIF driver122.

The ROIF driver122is desirably configured to not transmit the write command with respect to the SSD10at all from the standpoint of preventing the loss of user data caused by data breakage or damage of the SSD10. However, if there is a need to write the data of one part such as the system information of the operating system in the SSD10, the ROIF driver122may permit the write of the relevant data to the SSD10as an exception but the data amount of the relevant data is desirably sufficiently small compared with the capacity of the NAND memory20. More desirably, in order to prevent the user from transmitting the write command by mistake and writing the data to the SSD10, the ROIF driver122does not transmit the normal write command with respect to the SSD10at all such as 35h WRITE DMA EXT and 61h WRITE FPDMA QUEUED described in ACS-2, and the write with respect to the SSD10is desirably permitted by only the command using a special command such as the SCT Command Transport described in INCITS ACS-2 and other commands unique to the vendor if there is an exceptional need to write the data to the SSD10. If the write using a special command can be exceptionally carried out even at the time of the application of the ROIF driver122(time of RO mode), the memory controller50and the ROIF controller32need to be configured to receive the special command from the host100and perform the data write process normally even if the SSD10is the RO mode.

FIG. 13illustrates a configuration of management information used in the SSD10. The management information is stored in a non-volatile manner in the NAND memory20, as described above. The management information stored in the NAND memory20is extracted in the RAM40at the startup of the SSD10for use. The management information on the RAM40is evacuated and saved in the NAND memory20periodically or at the time of power disconnection. If the RAM40is nonvolatile RAM such as MRAM or FeRAM, the management information may be stored only in the RAM40, in which case the management information is not stored in the NAND memory20.

As illustrated inFIG. 13, the management information includes a free block table 21, a bad block table 22, an active block table 23, an active page table 24, a read only (RO) mode flag25, and statistical information26.

The free block table (FB table)21manages the ID of the physical block (free block: FB) of the NAND memory that can be newly assigned for write when carrying out write to the NAND memory20. The FB table also manages the number of times of erasing for every physical block ID.

The bad block table (BB table)22manages the ID of the bad block (BB) serving as a physical block that cannot be used as a storage region due to too much error etc.

The active block table (AB table)23manages the active block (AB) or the physical block assigned with application. In the AB table 23, the correspondence relationship of the LBA and the ID of the active block (AB) is managed. The number of times of erasing is also managed for every physical block ID.

The active page table (AP table)24manages the correspondence relationship of the LBA and the physical block ID and the physical page ID assigned with application.

The RO mode flag25is written with 0 at the time of shipment and at normal times, and is written with 1 when the SSD operates as the RO mode.

The statistical information26stores various parameters (X01 to X24) related to the reliability of the SSD10.

The statistical information includes total number of bad blocks (statistical information X01), total number of times of erasing (statistical information X02), average value of number of times of erasing (statistical information X03), cumulative value of number of times of write error occurrences of the NAND memory (statistical information X04), cumulative value of number of times of erase error occurrences of the NAND memory (statistical information X05), total number of readout logical sectors (statistical information X06), total number of write logical sectors (statistical information X07), total number of uncorrectable ECC error count (statistical information X08), total number of n bits to m bits ECC correction units (statistical information X09), number of times of R error occurrences of SATA communication (statistical information X10), number of times of error occurrences of SATA communication (statistical information X11), number of times of error occurrences of RAM40(statistical information X12), total number of used time of SSD10(statistical information X13), time total in which temperature is higher than highest value of recommended operation temperature (statistical information X14), time total in which temperature is lower than lowest value of recommended operation temperature (statistical information X15), maximum value of response time of command (statistical information X16), average value of response time of command (statistical information X17), maximum value of response time of NAND memory (statistical information X18), average value of response time of NAND memory (statistical information X19), current temperature (statistical information X20), highest temperature (statistical information X21), lowest temperature (statistical information X22), increase rate of statistical information (statistical information X23), NAND GC failure flag (statistical information X24), and the like.

The total number of bad blocks (statistical information X01) will be described. The statistical information X01 is incremented by one every time one physical block of the NAND memory20in the SSD10is added as the bad block. The statistical information X01 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10, where the block in which error occurred in the test process or in which the inter-distribution voltage margin of the threshold value distribution is small is more desirably added to the bad block in advance. The statistical information X01 may be directly calculated from the BB table 22 without being stored in the statistical information26. The more the statistical information X01 increases, it shows that the more the reliability degrades.

The total number of times of erasing (statistical information X02) will be described. The statistical information X02 indicates the cumulative value of the number of times of erasing of all the blocks of the NAND memory20in the SSD10. The statistical information X02 is incremented by one every time one physical block of the NAND memory20of the SSD10is erased. The statistical information X02 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The statistical information X02 may be directly calculated from the FB table 21, the BB table 22, and the AB table 23 without being stored in the SSD statistical information26. The more the statistical information X02 increases, it shows that the more the reliability degrades.

The average value of number of times of erasing (statistical information X03) will be described. The statistical information X03 indicates an average value per one block of the number of times of erasing of all the blocks of the NAND memory20in the SSD10. The block of one part such as the block storing the management information may be excluded from the target of counting of the statistical information X03. The statistical information X03 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The statistical information X03 may be directly calculated from the FB table 21, the BB table 22, and the AB table 23 without being stored in the statistical information26. The more the statistical information X03 increases, it shows that the more the reliability degrades.

The cumulative value of number of times of write error occurrences of the NAND memory (statistical information X04) will be described below. The statistical information X04 is added by one every time the write error occurs in units of one write in the NAND memory20of the SSD10(may be added in units of blocks). The statistical information X04 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X04 increases, it shows that the more the reliability degrades.

The cumulative value of number of times of erase error occurrences of the NAND memory (statistical information X05) will be described. The statistical information X05 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The statistical information X05 is added by one every time the erase error occurs in one block in the NAND memory20of the SSD10. With a plurality of blocks collectively assumed as an erase unit, the statistical information X05 may be added by one every time the erase error occurs in one such erase unit. The more the statistical information X05 increases, it shows that the more the reliability degrades.

The total number of read logical sectors (statistical information X06) will now be described. The statistical information X06 is the total number of logical sectors of the data transmitted to the host device100as read data by the interface controller30. The statistical information X06 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X06 increases, it shows that the more the reliability degrades.

The total number of write logical sectors (statistical information X07) will now be described. The statistical information X07 is the total number of logical sectors of the data received from the host device100as write data by the RWIF controller31. The statistical information X07 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X07 increases, it shows that the more the reliability degrades.

The total number of uncorrectable ECC error count (statistical information X08) will now be described. The statistical information X08 is incremented by one for every one readout unit when the error bit cannot be restored by the ECC correction carried out by the ECC correction circuit58. When the memory controller50reads out the data from the NAND memory20, the memory controller50transmits the read data to the ECC correction circuit58, and performs the ECC correction if there is data error and transmits the corrected data to the host through the interface controller30. If the data error is not corrected by the ECC correction circuit58, the memory controller counts up the statistical information X08 or increments the statistical information X08 with the amount of data error that cannot be corrected. The estimated value of the number of error bits that cannot be error corrected may be added, or the number of blocks that cannot be error corrected may be added. The statistical information X08 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X08 increases, it shows that the more the reliability degrades.

The total number of n bits to m bits ECC correction units (statistical information X09) will be described. Here, n, m are natural numbers, where 0≦n≦m≦maximum correctable number of bits. When the ECC correction circuit58performs the ECC correction on the ECC correction unit (e.g., physical page), if all error bits are normally restored and the restored number of error bits is greater than or equal to n and smaller than or equal to m, “total number of n bits to m bits ECC correction units” is added by one for one ECC correction unit. In the case of a maximum of 64 bits can be corrected for one correction unit by the ECC correction, eight parameters such as “total number of 1 bits to 8 bits ECC correction units”, “total number of 9 bits to 16 bits ECC correction units”, “total number of 17 bits to 24 bits ECC correction units”, “total number of 25 bits to 32 bits ECC correction units”, “total number of 33 bits to 40 bits ECC correction units”, “total number of 41 bits to 48 bits ECC correction units”, “total number of 49 bits to 56 bits ECC correction units”, “total number of 57 bits to 64 bits ECC correction units” may be prepared, where one of the eight parameters is incremented by one (or may be incremented with corrected amount of data error) for the ECC correction of one ECC correction unit when the ECC correction is normally carried out. The statistical information X09 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X09 increases, it shows that the more the reliability degrades.

The number of times of R error occurrences of SATA communication (statistical information X10) will be described. The statistical information X10 is incremented by one every time the R error (Reception Error, R_ERR) in the SATA standard occurs once. If some kind of error such as CRC error exists in a frame transmitted and received between the host and the SSD, it is counted as an R error. One of the counters of the Phy Event Counters of the SATA standard may be adopted for the statistical information X10. The statistical information X10 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X10 increases, it shows that the more the reliability degrades.

The number of times of error occurrences of SATA communication (statistical information X11) will be described. The statistical information X11 is incremented by one every time other abnormalities (other than R error) in the SATA communication occur once. For instance, if the communication standard actually negotiated between the SSD10and the host device100is a communication standard of lower speed than Generation 3 such as Generation 2 although the ATA interface90, the interface controller30, and the memory controller50are designed as SATA Generation 3, it is assumed as an error in the SATA communication, and the statistical information X11 is incremented by one. The statistical information X11 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X11 increases, it shows that the more the reliability degrades.

The number of times of error occurrences of RAM40(statistical information X12) will be described. For instance, if the ECC circuit or the error detection circuit is mounted on the RAM40, the statistical information X12 is incremented by one when the memory controller50receives from the RAM40a signal notifying that ECC correction cannot be made or a signal notifying the error detection. The statistical information X12 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X12 increases, it shows that the more the reliability degrades.

The total number of used time of SSD10(statistical information X13) will be described. The memory controller50counts the clock or receives the time information from an internal clock circuit to increment the elapsed time while the power supply of the SSD10is turned ON. Alternatively, the memory controller50periodically may receive the time information of the host device100from the host device100, and the difference in the time information may be incremented. The statistical information X13 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X13 increases, it shows that the more the reliability degrades.

The time total in which temperature is higher than highest value of recommended operation temperature (statistical information X14) will be described. If a thermometer is mounted in the SSD10such as on the substrate of the SSD10, in the memory controller50, and the NAND memory20, the memory controller50periodically receives the temperature information from the thermometer. If the received temperature is higher than the recommended operation temperature (e.g., 100° C.), the memory controller50increments the time total operating at higher than or equal to the recommended operation temperature based on the time information acquired from the clock, the internal clock, or the host device100. The statistical information X14 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X14 increases, it shows that the more the reliability degrades.

The time total in which temperature is lower than lowest value of recommended operation temperature (statistical information X15) will be described. If a thermometer is mounted in the SSD10, the memory controller50periodically receives the temperature information from the thermometer. If the received temperature is lower than the recommended operation temperature (e.g., −40° C.), the memory controller50increments the time total operating at higher than or equal to the recommended operation temperature based on the time information acquired from the clock, the internal clock, or the host device100. The statistical information X15 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X15 increases, it shows that the more the reliability degrades.

The maximum value of response time of command (statistical information X16) will be described. The statistical information X16 is a maximum value of a time (or number of clocks) required from when receiving the command from the host device100until responding to the host device100(or until the command execution is completed). If the response time greater than X16 occurs, X16 is overwritten by such response time. The statistical information X16 may be held with respect to each command. The statistical information X16 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10or at the time of the SSD10shipment. The more the statistical information X16 increases, it shows that the more the reliability degrades. For instance, the response time of the command may be,

readout response time of SSD10: time from when the SSD10receives the readout request from the host100until completing the transmission of the read data to the host100.

write response time of SSD10: time from when the SSD10receives the write request from the host100until returning a write complete notification to the host100. Alternatively, a time from when the SSD10receives the write request from the host100until completing the reception of the write data by the host100.

The response time may be timed by counting the internal clock of the memory controller50.

The average value of response time of command (statistical information X17) will be described. The statistical information X17 is an average value of a time (or number of clocks) required from when receiving the command from the host device100until responding to the host device100(or until the command execution is completed). A constant number of response time lists may be held in the RAM40, and it may be obtained by calculating the average value of the response time list. The statistical information X17 may be held with respect to each command. The statistical information X17 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10or at the time of the SSD10shipment. The more the statistical information X17 increases, it shows that the more the reliability degrades.

The maximum value of response time of NAND memory (statistical information X18) will be described. The statistical information X18 is a maximum value of the time (or number of clocks) required until the memory controller50obtains the response (or receives command execution complete notification) after issuing a command to the NAND memory20. If the response time greater than the X18 occurs, X18 is overwritten by such response time. The statistical information X18 may be held with respect to each command. The statistical information X18 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10or at the time of the SSD10shipment. The more the statistical information X18 increases, it shows that the more the reliability degrades. For instance, the response time of the NAND memory may be,

readout response time of NAND memory20: time from when the memory controller50issues the read request to the NAND memory20until the data readout from the NAND memory20is completed.

write response time of NAND memory20: time from when the memory controller50issues the write request to the NAND memory20until the data write to the NAND memory20is completed.

erase response time of NAND memory20: time from when the memory controller50issues the erase command to the NAND memory20until the erase of the NAND memory20is completed.

The response time may be timed by counting the internal clock of the memory controller50.

The average value of response time of NAND memory (statistical information X19) will be described. The statistical information X19 is an average value of a time (or number of clocks) required until the memory controller50obtains the response (or receives command execution complete notification) after issuing a command to the NAND memory20. A constant number of response time lists may be held in the RAM40, and it may be obtained by calculating the average value of the response time list. The statistical information X19 may be held with respect to each command. The statistical information X19 is desirably reset to zero at the time of manufacturing (before test process) of the SSD10or at the time of the SSD10shipment. The more the statistical information X19 increases, it shows that the more the reliability degrades.

The current temperature (statistical information X20) will be described. If a thermometer is mounted in the SSD10, the memory controller50periodically receives the temperature information from the thermometer. The memory controller50holds the temperature received last from the thermometer in the statistical information X20 as a current temperature. Determination is made that the reliability of the SSD10is adversely affected if such value is extremely high (e.g., higher than or equal to 85° C.), and the reliability of the SSD10is adversely affected if the temperature is extremely low (e.g., lower than or equal to −10° C.).

The highest temperature (statistical information X21) will be described. The memory controller50holds a maximum value of the current temperature X20 in the statistical information X21 as a highest temperature. Determination is made that the reliability of the SSD10is adversely affected if such value is extremely high (e.g., higher than or equal to 85° C.). When receiving the current temperature higher than X21 from the thermometer, the memory controller50rewrites the X21 to the current temperature. The X21 is desirably reset to a temperature (e.g., −40° C.) sufficiently small compared to the operation temperature of the SSD10at the time of manufacturing (before test process) of the SSD10or at the time of the SSD10shipment. The more the statistical information X21 increases, it shows that the more the reliability degrades.

The lowest temperature (statistical information X22) will be described. The memory controller50holds a minimum value of the current temperature X20 in the statistical information X22 as a lowest temperature. Determination is made that the reliability of the SSD10is adversely affected if such value is extremely small (e.g., higher than or equal to −40° C.). When receiving the current temperature lower than X22 from the thermometer, the memory controller50rewrites the X22 to the current temperature. The X22 is desirably reset to a temperature (e.g., 120° C.) sufficiently large compared to the operation temperature of the SSD10at the time of manufacturing (before test process) of the SSD10or at the time of the SSD10shipment. The more the statistical information X22 decreases, it shows that the more the reliability degrades.

The increase rate of statistical information (statistical information X23) will be described. The non-recent information of the statistical information X01 to X19 (e.g., values constant time before or when the power of the SSD10is turned ON, values of when the power of the SSD10is down the previous time, etc.) are separately held. The statistical information X23 is defined as one of the followings.
Increase rate of statistical information=(most recent statistical information)−(old information)
Increase rate of statistical information=((most recent statistical information)−(old information))/(elapsed time from when acquiring the old information)
Increase rate of statistical information=((most recent statistical information)−(old information))/(number of NAND accesses from when acquiring the old information)

It is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X23 increases, it shows that the more the reliability degrades.

The NAND GC failure flag (statistical information X24) will be described. If the statistical information X24 is 1, the sufficient number of free blocks for the operation cannot be ensured by the NAND garbage collection (NAND GC). It is desirably reset to zero at the time of manufacturing (before test process) of the SSD10. The more the statistical information X24 increases, it shows that the more the reliability degrades.

For the statistical information26, all the parameters described above may be stored, or some or only one of the parameters may be stored. The statistical information26desirably holds the most recent information on the RAM40, and periodically takes a backup in the NAND memory20. It may be saved only in either one of the RAM40or the NAND memory20, or the relevant statistical information may be transmitted to the host device100, and saved in the host device100or the storage device connected to the host device100.

The write operation in the SSD10will now be described usingFIG. 14. When the SSD10receives the write request from the host100(step S100), the memory controller50searches the free block table 21 of the RAM40(step S101), and acquires the current number of free blocks. The memory controller50performs the “NAND garbage collection” (“NAND GC”), to be described later, (step S120) if the number of free blocks is less than a predetermined threshold value (step S102), and newly obtains the free block from the free block table 21 and acquires the physical ID of the obtained free block if the number of free blocks is greater than the predetermine threshold value (step S102).

The memory controller50then performs the write operation to the acquired free block (step S103), adds the LBA, the physical block ID, and the number of times of erasing of the relevant physical block received from the host100in the active block table 23, and also adds the LBA, the physical block ID, and the physical page ID to the active page table 24 (step S104), and removes the physical block subjected to the write from the free block table 21 (step S105). The memory controller50reflects the content of the above write process in the statistical information26.

The operation example of the NAND GC (FIG. 14: step S120) in the SSD10will now be described usingFIG. 15. The page (valid page) registered in the active page table 24 of all the pages contained in the physical block is corresponded to the LBA. Not all the pages contained in the physical block may be valid pages, and the page not corresponding to the valid page (invalid page) is not corresponded to the LBA. The valid page is the page storing the most recent data, and the invalid page is the page where the data of the same LBA is written in another place and thus is no longer referenced. The physical block has availability in data by the amount of invalid pages, and hence the free block can be ensured by executing the NAND GC of collecting the data of the valid pages and rewriting to different blocks.

First, assume the row number i=0, and the cumulative number of free spaces S=0 (step S121). The memory controller50reads out the head row (i=0) of the active block table 23, and acquires the physical block ID (current physical block ID) of the head row (step S122). The active page table 24 is then read out, and all the IDs of the valid pages corresponding to the current physical block ID in the active page table 24 are acquired (step S123). The memory controller50subtracts the size for the number of acquired valid page IDs from the size of the physical block to obtain the size v of the invalid page of the current physical blocks (step S124), where the current physical block is added to the NAND GC target block list (step S127) if v>0 (step S125). Furthermore, the memory controller50adds the size v of the invalid page of the current physical block to the cumulative number of free spaces S and updates the cumulative number of free spaces S (step S128).

If v=0 in step S125, or if the cumulative number of free spaces S has not reached the physical block size in step S125, the memory controller50increments the column number i to 1 (step S126), reads out the next row (i=1) of the active block table 23, and acquires the physical block ID (current physical block ID) of the next row (step S122). Thereafter, the procedures of steps S123to S128are similarly executed. The procedures of steps S122to S129are similarly repeated until the cumulative number of free spaces S reaches the physical block size in step S129.

If the total amount of size S of the invalid pages acquired up to now becomes greater than the size of the physical block in step S129, the memory controller50reads out the data of all the valid pages on the NAND GC target block list from the NAND memory20and writes the same in the RAM40(step S130), and also performs the erase process on all the physical blocks on the NAND GC target block list (step S131), removes all the physical blocks subjected to the erase process from the active block table 23 and adds the same to the free block table 21 (in this case, number of times of erasing is incremented), and removes all the pages that are read out from the active page table 24 (step S132). The memory controller50then acquires the new free block from the free block table 21, writes the data written to the RAM40into the acquired free block (step S133), adds the physical block ID of the free block in which the data is written, the corresponding LBA and the number of times of erasing of the relevant block to the active block table 23, adds the page ID in which the data is written and the corresponding LBA to the active page table 24 (step S134), and removes the block ID of the block in which the data is written from the free block table 21 (step S135). The memory controller50reflects the processing content of the NAND GC on the statistical information26. The erase process of step S131does always not have to be carried out in the NAND GC of the step S120, and may be carried out immediately before the write operation of step S103and increment the number of times of erasing.

A sufficient number of free blocks can be usually ensured with respect to the write by such NAND GC. If a sufficient number of free blocks cannot be ensured with respect to the write even by the NAND GC (step S136), the “RO mode shift process”, to be described later, is carried out (step S137).

The NAND GC is not limited to being executed when receiving the write request from the host100, and may be executed when a predetermined time has elapsed from when receiving the command the last from the host or when receiving a command for shifting to the standby or idle state from the host100.

The readout process in the SSD10will now be described usingFIG. 16. When the SSD10receives the read request from the host100(step S140), the memory controller50searches the active block table 23 (step S141), and investigates whether or not the physical block ID corresponding to the LBA received from the host100exists in the active block table 23 (step S142). If the physical block ID exists in the active block table 23, the memory controller50acquires the physical page ID contained in the physical block ID of the active page table 24 (step S144), reads out the data from the physical page corresponding to the acquired physical page ID (step S145), and transmits the read data to the host100through the RAM40(step S146). The memory controller50reflects the content of the above readout process on the statistical information26.

If the physical block ID corresponding to the LBA received from the host100does not exist on the active block table 23 in step S142, the memory controller50may transmit the data in which all the bits are ‘0’ to the host100by the data length corresponding to the request from the host100without performing the readout operation from the NAND memory20(step S143).

The error process in the SSD10will now be described usingFIG. 17. The processes with respect to the write request and the read request from the host100are usually carried out in the above manner, but a write error may occur in the write operation (program operation) to the NAND memory20, an erase error may occur in the erase operation with respect to the NAND memory20, an uncorrectable ECC (Error Correcting Code) error (failure in error correcting process) may occur in the readout operation with respect to the NAND memory20, and the like, in which case an exceptional process therefor becomes necessary.

The memory controller50adds the physical block in which the error occurred to the bad block table 22 (Step S151) when one of the above error occurred (step S150), and removes the physical block in which the error occurred from the active block table 23 and the free block table 21 (step S152), so that the physical block in which the error occurred is not accessed thereafter. In this case, the data of the physical block in which the error occurred may be copied to a different physical block. The memory controller50reflects the content of the error process on the statistical information26. One example of such error process has been introduced in the description of the readout process, the write process, and the NAND GC process, but the error process is not limited to such examples, and it should be recognized that it can be applied with respect to all the readout process, the write process, the erase process, and other kind of operations on the NAND memory20.

The reliability of each block of the NAND memory20degrades, the number of bad blocks increases, and the sum of the number of free blocks and the number of active blocks decreases through the use of the SSD10. Furthermore, if the SSD10is used, the number of free blocks sufficient to perform the write process cannot be ensured even if the NAND GC is performed, which is the lifespan of the SSD10. In such a case, determination is made that the RO mode shift condition is met and the RO mode shift process is carried out.

The RO mode shift process in the SSD10will now be described usingFIG. 18. While the SSD10is operating, the memory controller50determines whether or not the RO mode shift condition is met by monitoring the statistical information26(step S160). RMAX serving as criteria of the RO mode shift may be RMAX=upper limit value of a value of statistical information that guarantees reliability.

The RMAX may adopt different values for each statistical information X01 to X19, X23, X24. As illustrated inFIG. 19, the RMAX derives the relationship of the raw value (raw data) of the statistical information and the defect rate of the SSD10at the development stage, and desirably adopts the raw data of the statistical information of when the defect rate exceeds an acceptable value (e.g., 100 ppm) for the RMAX. For the defect rate, other defect rates such as the defect rate of the data written to the SSD10, the defect rate of the NAND memory20, or the defect rate of the memory cell of the NAND memory20may be adopted instead of the defect rate of the SSD10. For instance, at the development stage of the SSD10, a wear test of verifying whether the written data is correctly stored continuously for a constant time or longer is carried out while repeating the write operation at high temperature with respect to a great number (e.g., 100) of test SSD10groups, and at the same time, the statistical information is continued to be monitored and the raw data of the statistical information at the time point the defect rate reaches a constant percentage may be adopted for the RMAX. For instance, if the data (e.g., random data) is written with the high temperature state (e.g., 75° C.) as an initial condition with respect to the entire region of the LBA of the worn SSD10, left untouched for a certain time or longer in the high temperature state (e.g., 85° C.), and thereafter, the temperature of the SSD10is lowered (e.g., 25° C.) and the readout operation is carried out on the entire region of the LBA of the SSD10and the read data is not ECC correctable (or if there is a constant number of more data that is not ECC correctable, or if the read data and the data written in the initial condition do not match or cannot be read out), this is defined as the defect of the SSD10, and a value obtained by dividing the number of defected SSD10by the number of SSD10performed with the test is adopted for the defect rate. The raw data of the statistical information in which such defect rate is statistically and significantly lower than the acceptable defect rate may be adopted for the RMAX. A margin of a certain extent may be given to the RMAX, and RMAX′ obtained by
RMAX′=RMAX−margin
may be adopted for the RMAX.

The RMAX may be obtained by the design simulation at the time of the development. For instance, the value of the statistical information in which the defect rate such as the defect rate of the SSD10becomes greater than or equal to a constant value may be obtained by the design simulation, and such value may be adopted for the RMAX.

As illustrated inFIG. 20, for the RMAX, the value of the statistical information in which the performance (readout performance, write performance, etc.) of the SSD10becomes smaller than or equal to a predetermined value may be specified by measurement or simulation of the SSD10, and this may be adopted for the RMAX. For instance, since the probability the data read from the memory cell of the NAND memory is wrong increases as the reliability of the NAND memory degrades, the time required for the ECC correction at the time of the data readout increases, and there is a possibility of a strong correlation between the reliability of the SSD10and the readout performance of the SSD10. For instance, the following performance measurement is carried out for the measurement of a sequential readout performance.

1. F4h SECURITY ERASE UNIT (Normal Erase) of ACS-2 is carried out with respect to the SSD10.

2. Data (e.g., random data) is sequentially written onto the entire region of the LBA of the SSD10.

3. The readout is sequentially carried out on all the LBA, and the average value of the read amount of data (unit MiB/s) is obtained per unit time (readout speed). The measurement may be carried out according to the standard described in non-patent document (SNIA, Solid State Storage Performance Test Specification Version 0.9 http://www.snia.org/) for the measurement of the performance information (e.g., performance speed).

As illustrated inFIG. 20, the statistical information dependency of the performance information is obtained, for instance, when the sequential readout speed expected value at the time of shipment of the SSD10is 400 MiB/s and the lowest performance that can be allowed by the standard of the publicized specification is 300 MiB, the value of the statistical information in which the readout speed expected value becomes 300 MiB is obtained and is adopted for the RMAX.

Thus, the RMAX can be arbitrarily defined by the developer, and can also be defined by methods and references other than the above.

The memory controller50compares the RMAX and the value of the statistical information (one of X01 to X19, X23, X24), and determines that the SSD10reached the end of the lifespan and the mode is to be shifted to the RO mode (step S160: Yes) when value of statistical information>RMAX or value of statistical information≧RMAX. For instance, in the case of the NAND GC failure flag (statistical information X24), determination is made that the SSD10reached the end of the lifespan and the mode is to be shifted to the ROM mode when it is 1. In the case of the total number of bad blocks (statistical information X01), determination is made that the SSD10reached the end of the lifespan and the mode is to be shifted to the ROM mode when it becomes greater than a predetermined value.

The memory controller50compares each a plurality of the values of the statistical information (one of X01 to X19, X23, X24) with the RMAX and determines to shift to the ROM mode when one of them is greater than or equal to RMAX.

The memory controller50determines whether or not the SSD10reached the end of the lifespan (whether or not SSD10is in abnormal state) in the above manner, and performs the RO mode shift process, to be described later, (step S160: Yes) when determined that the SSD10reached the end of the lifespan (when determined that SSD10is in abnormal state).

When adopting the current temperature X20 and the highest temperature X21 for the statistical information such as adopting RMAX=85° C. for the RMAX, determination is made that the SSD10is in an abnormal state and to be shift to the RO mode at the temperature outside the guarantee of the operation such as value of statistical information>RMAX or value of statistical information RMAX (step S160: Yes), and thereafter, determination is desirably made to shift from the RO mode to the normal mode since the SSD10returned to the normal state when returned to the normal temperature with value of statistical information≦RMAX−MAX margin or value of statistical information<RMAX−MAX margin (step S160: No). The MAX margin is a value greater than or equal to zero, but MAX margin is desirably a value greater than zero to prevent the switching of the RO mode and the normal mode from frequently occurring (e.g., MAX margin=5° C.).

The statistical information may take various modes other than the statistical information X01 to X19, X23, X24 introduced in the present embodiment, but the present invention is also applicable thereto. A positive correlation exists in a relationship of the X01 to X19, X23, and X24 and the defect rate, but the present invention is also applicable to the statistical information in which a negative correlation exists with the defect rate (e.g., lowest temperature experienced by the SSD10after shipment, etc.). In this case, the lower limit value RMIN that can guarantee reliability is adopted in place of the RMAX, where determination is made that the SSD10reached the end of the lifespan when the statistical information becomes smaller than RMIN and shift is made to the RO mode.

In particular, when adopting the current temperature X20 and the lowest temperature X22 for the statistical information such as adopting RMIN=−10° C. for the RMIN, determination is made that the SSD10is in an abnormal state and to be shifted to the RO mode at the temperature outside the guarantee of the operation such as value of statistical information<RMIN or value of statistical information≦RMIN (step S160: Yes), and thereafter, determination is desirably made to shift from the RO mode to the normal mode since the SSD10returned to the normal state when returned to the normal temperature with value of statistical information≧RMIN+MIN margin or value of statistical information>RMIN+MAX margin (step S160: No). The MIN margin is a value greater than or equal to zero, but MIN margin is desirably a value greater than zero to prevent the switching of the RO mode and the normal mode from frequently occurring (e.g., MIN margin=5° C.).

The RO mode shift process is desirably carried out even if the SSD10has not reached the end of the lifespan when the statistical information becomes greater than the predefined RMAX or shows an abnormal value that is not possible in the normal operation.

When the RO mode shift condition is met (step S160: Yes), the following RO mode shift process is started. First, the memory controller50desirably cancels all the write processes on the NAND memory20currently being performed (step S161), returns an error with respect to all the write requests received from the host100, and deletes all the queues of the write request received from the host100(step S162). The memory controller50then writes1to the RO mode flag25in the management information of the NAND memory20(step S163). In this case, all the tables other than the RO mode flag25of the management information of the RAM40may be reflected on the management information of the NAND memory. The SSD10thereafter returns an error to all the write requests received from the host100until the power is cut off or reset (steps S164, S165).

The startup process of the SSD10will now be described usingFIG. 21. When the SSD10is started, the IPL55reads out the RO mode flag25in the management information of the NAND memory20(step S170), and discriminates the RO mode flag25(step S171). If the RO mode flag25is 0 (step S171), the IPL55validates the RWIF controller31of the interface controller30(step S172) to be in the normal mode, and then reads out the management information of the NAND memory20to the RAM40(step S173).

If the RO mode flag25is 1, the IPL55validates the ROIF controller32to be in the RO mode (step S174), and then reads out the management information of the NAND memory20on the RAM40(step S175). In the RO mode, the SSD10acts as a read only device that does not support the write. After the shift to the RO mode, the SSD10merely needs to carry out only the read operation of the read operation and the write operation, and hence the information of the management table may be rearranged such that the speed of the readout operation becomes faster.

The operation on the host100side will now be described. First, the operation at the time of startup of the host100will be described usingFIG. 22. When the host100is started, the host100starts the SSD control tool110(step S201). If the OS150is Windows (registered trademark), the SSD control tool110is desirably startup registered or service program registered so that the SSD control tool110is set as a resident program at the time of the startup, and the SSD control tool110can be automatically started. The system disc used in the startup of the host100may be the SSD10, the SSD or a hard disc drive (HDD) prepared separate from the SSD10in which the system is installed in advance, or the DVD-ROM, the CD-ROM, or the USB memory in which the boot program is installed.

When the SSD control tool110is started, the SSD control tool transmits a transmission request of the device information to the SSD100to acquire the device information of the SSD10. As described above, if the RWIF controller31is valid in the SSD10, the SSD control tool110recognizes the that SSD10is the ATA device through the LBA(7:0) and LBA(15:8) in the Device Signature described in ACS-2, and the RWIF controller31transmits identification information that it is a readable and writable device to the host100when receiving a transmission request of the device identification information such as the ECh IDENTIFY DEVICE or the like described in ACS-2 from the host100. If the ROIF controller32is valid in the SSD10, the SSD control tool110recognizes that the SSD10is the ATAPI device through the LBA(7:0) and LBA(15:8) in the Device Signature described in ACS-2, and the ROIF controller32transmits device identification information that it does not support write when receiving a transmission request of the device identification information such as the 46h GET CONFIGURATION or the like described in MMC-6 from the host100. Therefore, the SSD control tool110acquires the device identification information from the SSD10in such manner (step S202). The method of notifying whether or not the SSD10is a read only device may take various forms other than the above.

If the information returned from the SSD10is the write non-supporting device (step S203), the SSD control tool110switches and sets the selection switches123,124to invalidate the RWIF driver121(step S206) and validate the ROIF driver122(step S207) to operate the SSD10in the RO mode. If the information returned from the SSD10is not the write non-supporting device (step S203), the SSD control tool110switches and sets the selection switches123,124to invalidate the ROIF driver122(step S204) and validate the RWIF driver121(step S205) to operate the SSD10in the normal mode.

The operation of the SSD control tool110while the host100is operating will now be illustrated usingFIG. 23. In order to rapidly detect that the SSD10shifted to the RO mode, the SSD control tool110desirably continues to monitor the response from the SSD10with respect to the write request from the host100if the SSD10is in the normal mode (step S210). If the SSD10is in the RO mode, the write request is not transmitted to the SSD10, and hence the SSD control tool110may not monitor the response of the SSD10.

If an error is returned with respect to the write request transmitted to the SSD10in the normal mode (may be error of one time or may be an error of plural times), the SSD control tool110determines as a state in which the SSD10started the RO mode shift process illustrated inFIG. 18and returned an error with respect to all the write requests, and invalidates the RWIF driver121(step S211). The SSD control tool110desirably re-start the SSD10by sending a reset command to the SSD10and the like (step S212) using the COMPRESET of the SATA standard, the command unique to the vendor of SCT Command Transport described in ACS-2, and the other command unique to the vendor, from the standpoint of rapidly recognizing the SSD10as the write only device. Such re-start process of the re-start of the computer system1by the user is carried out by OFF/ON of power supply of the SSD10, and the SSD10shifts to the RO mode by performing the process illustrated inFIG. 21. The SSD control tool110validates the ROIF driver122(step S213).

Therefore, the host100can reliably perform the readout process with respect to the SSD10without mistakenly recognizing the SSD10as the non-available external storage device while the SSD10is immediately after the start of the RO mode shift process and the during the RO mode.

FIG. 24illustrates the example of the drive display of when the Windows (registered trademark) is used for the OS in the host100, and assumes that the SSD is connected for the drive D. If the SSD is in a normal readable and writable state, the type of drive D is displayed as “local disc”, as illustrated inFIG. 24(a). However, after the SSD control tool110recognizes that the drive D is the write non-supporting device by the processes ofFIG. 22andFIG. 23, the type of the drive D is displayed as “CD-ROM”, “DVD-ROM”, or “ROM drive”, as illustrated inFIG. 24(b).

In the above description, the statistical information X01 to X19, X23, X24 are adopted for the statistical information used in the RO mode shift condition inFIG. 18in the SSD10, but other statistical information may be used to determine whether the RO mode shift condition is met.

For instance, if a management unit called a cluster described in U.S. Patent Application Publication No. 2009 0222617 is introduced in the SSD10, the number of bad clusters may be adopted for the RO mode shift condition. The cluster size is a natural number multiples of two or greater of the sector size, and the cluster address is configured by a higher bit sequence from a predetermined bit of the LBA. In the SSD10, a bad cluster table for managing the cluster address (cluster ID) of the bad cluster is held as the management information. When the ECC correction error occurs in the ECC process by the ECC correction circuit58when readout is carried out from the NAND memory20, the memory controller50may register the cluster in which the ECC correction error occurred in the bad cluster table. The number of bad clusters can be acquired based on the registered content of the bad cluster table. Therefore, if the SSD10is operating in the normal mode, the memory controller50acquires the current number of bad clusters based on the number of entries of the bad cluster table in the management information stored in the RAM40, compares the acquired number of bad clusters with a threshold value, and determines that the RO mode shift condition is met when the number of bad clusters is greater than or equal to the threshold value.

In the flowcharts ofFIG. 18andFIG. 21, whether the read only mode shift condition is met is determined at the startup of the SSD by interposing the RO mode flag25in the SSD10, but whether or not to shift to the read only mode may be determined by directly determining whether or not at least one of various types of management information used in the RO mode shift condition meets the RO mode shift condition at the time of startup instead of using the RO mode flag25.

A variant of the process of the SSD control tool110mounted on the host100will now be described. For instance, the operation procedure illustrated inFIG. 25may be adopted in place of the operation procedure illustrated inFIG. 23. InFIG. 25, when the SSD10is operating in the normal mode, the SSD control tool110issues a command for periodically acquiring the statistical information of the SSD10to the SSD10(step S220). This command may be SMART READ DATA(B0h(D0h)) or a command of S.M.A.R.T (Self-Monitoring Analysis and Reporting Technology), which is a self-diagnostic function of the memory, SCT Command Transport described in ACS-2, or a command unique to the vendor. In the SSD10that received the information of the S.M.A.R.T, the memory controller50acquires one of, one part of, or all of the statistical information X01 to X19, X23, X24 and returns the acquired statistical information to the host100. The SSD control tool110acquires the statistical information by receiving the statistical information returned from the SSD10(step S221).

FIG. 26illustrates a management table regarding the statistical information X01 to X19, X23, X24. For instance, as illustrated inFIG. 26, when using B0h/D0h SMART READ DATA, an attribute ID is assigned with respect to each of the constituent elements (X01 to X19, X23, X24, etc.) of the statistical information but the attribute ID may, of course, be assigned only to some of the constituent elements. With regards to the constituent element of the statistical information26, SMAB is adopted as a best value after standardization, and SMAL defined such as: SMAL=SMAB*AMALR (0≦AMALR<1) (SMAL is an integer, and is converted to an integer from a decimal by either rounding, rounding up after the decimal point or rounding up after the decimal point) is adopted for the reliability guaranteeing lower limit value after standardization. Attribute value is defined as:
attribute value=SMAL+SMAB×(1−AMALR)×(RMAX−raw data)/RMAX
attribute Threshold=30 (fixed value)
(raw data)=raw data of statistical information
so that the memory controller50calculates the attribute value (“Value” inFIG. 26) of the S.M.A.R.T information and transmits the same to the SSD control tool110. The attribute Threshold is “Threshold” inFIG. 26, and the raw data is “Raw Data” inFIG. 26.

The best value SMAB after the standardization merely needs to be an arbitrary natural number, and SMAB=100 may be adopted. The AMALR merely needs to be an arbitrary number that meets 0≦AMALR<1, and AMALR=0.3 may be adopted. Furthermore, the AMALR and the SMAB can adopt different values with respect to each X01 to X19, X23, X24. If SMAB=100 and AMALR=0.3, the best value of the attribute value is 100 (e.g., 100 immediately after shipment) with respect to the statistical information to be adopted and gradually decreases as the reliability degrades, where the attribute value 30 reaches a value smaller than or equal to 30 when the SSD can no longer guarantee reliability (when raw data of statistical information becomes greater than or equal to RMAX). B0h/DAh SMART RETURN STATUS, which is a command described in ACS-2, is used as a means for detecting whether or not the attribute value exceeds the Threshold, and whether or not the Attribute Value exceeds the Threshold value may be determined from the Output of the relevant command.

“Worst” ofFIG. 26may be adopted as the specification for the SSD control tool110to diagnose the lifespan of the SSD10. “Worst” is calculated by the memory controller50as a worst value of the attribute value. In the case of X01 to X19, X23, X24, Worst is a minimum value of the attribute value after the shipment (or after manufacturing) of the SSD10. Alternatively, with respect to the Worst, a minimum value of the attribute value within a constant time range in the past may be adopted as the Worst Value, or a minimum value from the past until the present may be adopted as the worst value going back to the past in which the communication or process is carried out for a certain number of times (certain amount of data).

“Raw Data” (Raw Value) inFIG. 26may be adopted as a specification for the SSD control tool110to diagnose the lifespan of the SSD10. The raw data of the statistical information (e.g., X01 to X19, X23, X24) is transmitted from the SSD10to the SSD control tool110as Raw Data. In this case, the SSD control tool110may already hold the RMAX or the SSD control tool110may acquire the RMAX by separately reading out from the SSD10or reading from another storage device, compare the RMAX and the Raw Data, and determine that the SSD10reached the end of the lifespan when Raw Data>RMAX or Raw Data≧RMAX. For instance, in the case of the NAND GC failure flag, determination is made that the SSD10reached the end of the lifespan when it is 1. In the case of the total number of bad blocks, determination is made that the SSD10reached the lifespan when it becomes greater than a predetermined value. With respect to the Raw Data, the raw data of the statistical information does not necessarily need to be output, and the memory controller50may transmit to the SSD control tool110a value obtained by performing four arithmetic operations on the raw data of the statistical information as the Raw Data, and compare the RMAX with the value obtained through the four arithmetic operations to make the determination. The memory controller50may transmit to the SSD control tool110data obtained by encrypting the raw data of the statistical information as the Raw Data, and the memory controller50may decode the same and compare the decoded data with the RMAX to make the determination.

The SSD control tool110compares the acquired statistical information with a predetermined threshold value such as RMAX and RMIN (step S222), and invalidates the RWIF driver121(step S223), similar toFIG. 23, when determined that the SSD10reaches the end of the lifespan (or right before the end of lifespan, or in abnormal state) (step S222: Yes) such as when the statistical information of the SSD10becomes greater than RMAX (or X24=1, or when the statistical information becomes smaller than RMIN). The SSD control tool110may re-start the SSD10(step S224). After the re-start of the SSD10, the SSD control tool110validates the ROIF driver122(step S225).

The operation in the host100when the SSD10is in the normal mode may be the operation procedure illustrated inFIG. 27. In such operation procedure, the SSD control tool110periodically issues a SMART READ DATA or a command of the S.M.A.R.T or a vendor unique command to the SSD10(step S240). In the SSD10receiving the information of the S.M.A.R.T, the memory controller50acquires the current number of bad clusters based on the number of entries of the bad cluster table in the management information stored in the RAM40, and returns the acquired number of bad clusters to the host100. The SSD control tool110acquires the number of bad clusters by receiving the number of bad clusters returned from the SSD10(step S241).

The SSD control tool110compares the acquired number of bad clusters with a predetermined threshold value (step S242), and invalidates the RWIF driver121(step S243), re-starts the SSD10(step S244), and validates the ROIF driver122(step S245), similar toFIG. 13, when the number of bad clusters of the SSD10is greater than or equal to a threshold value.

The backup function may be loaded in the SSD control tool110. In a state the SSD10is shifting to the read only mode, the data retention properties of the SSD10are assumed to be degrading, and thus the user data of the SSD needs to be evacuated to another secondary storage device as fast as possible.FIG. 28is a view illustrating a configuration of the host100of when the SSD control tool110is loaded with the backup function. The secondary storage device (other SSD, hard disc drive, portable disc storage medium, etc.)400is connected to the host100, and the OS of the host100and the secondary storage device400communicate through a secondary storage device driver401.

FIG. 29illustrates an operation example of the SSD control tool110when taking a backup. InFIG. 29, step S208is added to the operation procedure of the SSD control tool110illustrated inFIG. 22. In the backup in step S208, the SSD control tool110displays a message such as “SSD is shifting to read only mode. Need backup of data of SSD?”, and an “OK” button and a “Cancel” button for selecting the necessity of backup. The backup starts when the “OK” button is clicked with the mouse135, and the display of the message disappears without carrying out the backup when the “Cancel” button is clicked with the mouse135. A command to read out the data of all LBA of the SSD10is sent to the ROIF driver122. The SSD control tool110sends a command to the secondary storage device driver401to write the data read out from the SSD10to the LBA (LBA of secondary storage device400) same as the LBA (LBA of SSD) of the data read out from the SSD10. For instance, the data of LBA=0h of the SSD10is copied to the LBA=0h of the secondary storage device400. The data of LBA=234c5h of the SSD10is copied to the LBA=234c5h of the secondary storage device400.

In the backup process, the SSD control tool110may send a command to the OS of the host100to copy all the files of the SSD10to the secondary storage device400.

In this case, the OS references the file management table or metadata contained in the OS, acquires all the LBAs of all the files of the SSD10, reads out all the data of the acquired LBAs, writes the read data in the secondary storage device400, and updates the file management table or metadata such that the written LBA and the index of the file are corresponded. The information of the partition including the Master Boot Record (MBR) information of the SSD10and the file system management region may be accessed to acquire the information of the region being used and the file, the ROM image on the data of the SSD10is created based on the acquired information, and the created ROM image may be saved in another storage device.

In the present embodiment, the physical address of the NAND memory20is directly associated to the LBA in the management information for simplicity, but the LBA may be managed using the management unit of a natural number multiples of two or greater of the sector size as in U.S. Patent Application Publication No. 2009 0222617, and the correspondence relationship of the management unit and the physical address of the NAND memory20may be described in the management information instead of the LBA. The management information describing the correspondence relationship of the physical address of the NAND memory20and the LBA may take various forms, and the form taken by the table (logical—physical conversion table) describing the correspondence relationship of the physical address and the LBA does not influence the essence of the present invention. With respect to the nonvolatile memory other than the NAND type flash memory as well, the management information describing the correspondence relationship of the physical address and the nonvolatile memory and the LBA may take various forms but the form taken by the table (logical—physical conversion table) describing the correspondence relationship of the physical address and the LBA does not influence the essence of the present invention.

The information not related to the reliability information used in the management information section does not influence the essence of the present invention. The requirements for the reliability information can also be applied in embodiments after the second embodiment.

Therefore, according to the first embodiment, whether or not the read only mode shift condition is met is determined in the SSD10, where if the read only mode shift condition is met, the interface controller is switched to that dedicated for reading, and whether or not to recognize the SSD10as the read only memory in which only the read operation of the read operation and the write operation is enabled is determined based on the information acquired from the SSD10in the host100, and the interface driver for the SSD control is switched to that dedicated for reading if determined to be recognized as the read only memory, and hence the host can normally recognize the SSD that shifted to the read only mode as a device in which only the read operation is enabled.

Second Embodiment

In the first embodiment, the function mounting to the SSD10and the function mounting to the host100are both used. In the second embodiment, a case in which only the function mounting to the SSD10is applied is illustrated. It is most effective if the function is mounted on both the SSD10and the host100, but sufficient effect can be exhibited even by mounting the function only on the SSD10.

FIG. 30illustrates a configuration of the second embodiment of the computer system. In the second embodiment, the SSD10is mounted with the interface controller30described in the first embodiment, and the SSD control tool110for switching the interface driver120for the SSD10is not mounted on the host100side. InFIG. 30, the same reference numerals are denoted on the constituent elements having the same function as the constituent elements illustrated inFIG. 1, and redundant description will be omitted. In the second embodiment, for example, the function of the IPL55is mounted on the controller50. In the SSD10of the second embodiment as well, the functions of the SSD10described in the first embodiment above all can be mounted.

In the second embodiment, the memory controller50determines whether or not the read only mode shift condition described above for shifting the SSD10from the normal readable/writable state to the read only mode state is met using the management information described above at the startup of the SSD or during the operation of the SSD, where the interface controller30is switched from the RWIF controller31to the ROIF controller32if the read only mode shift condition is met. The RWIF controller31transmits the device identification information indicating that the relevant drive is a readable/writeable drive to the host when a request is made from the host100. The ROIF controller32transmits the device identification information indicating that the relevant drive is a reading dedicated drive to the host when a request is made from the host100.

The RWIF controller31is desirably configured to explicitly indicate to the host100that the SSD10is the ATA device. For instance, in the Device Signature described in ATA/ATAPI Command Set-2 (ACS-2), LBA(7:0) is output to 01h, LBA(15:8) to 00h, and LBA(23:16) to the host100as 00h, so that notification can be made to the host100that the SSD10is the ATA device. The ROIF controller32is desirably configured to explicitly indicate to the host100that the SSD10is the ATAPI device. For instance, in the Device Signature described in ACS-2, LBA(7:0) is output to 01h, LBA(15:8) to 14h, and LBA(23:16) to the host100as EBh, so that notification can be made to the host100that the SSD10is the ATAPI device.

The ROIF controller32is configured to notify the host100that the SSD10does not support the write command and is read only. For instance, when receiving the command GET CONFIGURATION (46h) adopted in the INCITS Multi-Media Commands-6 (MMC-6) from the host100through the ATA interface90, the ROIF controller32returns to the host100that all the write functions are non-supportive in the features such as Random Writable (Feature Number=0020h), Incremental Streaming Writable (Feature Number=0021h), Write Once(Feature Number=0025h), and the like. On the other hand, the ROIF controller32may be configured to explicitly indicate to the host100that the SSD10is the ATA device, similar to the RWIF controller31, and may be configured to return to the host100that all the write functions are non-supportive when receiving the device identification information from the host100through the ATA interface90such as the command ECh IDENTIFY DEVICE described in ACS-2. The method of notifying whether or not the SSD10is a read only device may take various other forms.

For instance, with reference toFIG. 18used in the first embodiment, the memory controller50determines whether or not the RO mode shift condition is met is determined while the SSD10is operating (FIG. 18: step S160). A specific example of when the RO mode shift condition is met including a condition such as when determined that the SSD10reached the end of the lifespan (or right before reaching the end of the lifespan, or in abnormal state) such as when at least one of the statistical information X01 to X19, X23, X24 is greater than RMAX, when X24=1, or when the statistical information is smaller than RMIN.

When the RO mode shift condition is met, the memory controller50desirably cancels all the write processes on the NAND memory20currently being performed (step S161), returns an error with respect to all the write requests received from the host100, and deletes all the queues of the write request received from the host100(step S162). The memory controller50then writes1to the RO mode flag25in the management information of the NAND memory20(step S163). The SSD10thereafter returns an error to all the write requests received from the host100until the power is cut off or reset (steps S164, S165).

At the startup of the SSD10, the operation similar toFIG. 21used in the first embodiment is executed. In other words, when the SSD10is started, the IPL55in the memory controller50reads out the RO mode flag25in the management information of the NAND memory20(step S170), and read the RO mode flag25(step S171). If the RO mode flag25is 0 (step S171), the IPL55validates the RWIF controller31of the interface controller30(step S172) to be in the normal mode, and then reads out the management information of the NAND memory20to the RAM40(step S173).

If the RO mode flag25is 1, the IPL55validates the ROIF controller32to be in the RO mode (step S174), and then reads out the management information of the NAND memory20on the RAM40(step S175). In the RO mode, the SSD10acts as a read only device that does not support the write.

The host100requests for the identification information to the connected device at the startup of the host100or at the connection of the device. In the normal mode, the SSD10has the RWIF controller31return device identification information indicating that the SSD10is readable and writable with respect to the host100to the host, and hence the host100recognizes the SSD10as a readable and writable device. In the RO mode, the SSD10has the ROIF controller32return device identification information indicating that the SSD10is a write non-supporting read only drive to the host100, and hence the host100recognizes the SSD10as the write non-supporting device. Therefore, at the time of the RO mode, the write request is not sent from the host100to the SSD10. Thus, in the RO mode, the SSD10acts as a read only device that does not support the write, so that accesses other than the write can be made from the host100. The SSD10can be recognized as a readable device even if Windows (registered trademark) is mounted on the host100for the OS.

When the identification information that the SSD10is a write non-supporting external storage device is notified from the SSD10to the host100when the reliability of the SSD10is degraded, it appears to the host100as if the SSD10switched from the readable and writable external storage device to the write non-supporting external storage device. Therefore, the SSD10with degraded reliability acts as a read only device to the host100, so that the host100can handle the SSD10as a general read only external storage device such as the CD-ROM or the DVD-ROM.

Third Embodiment

In the third embodiment, a case in which only the function mounting to the host100is applied is shown. It is most effective if the function is mounted on both the SSD10and the host100, but sufficient effect can be exhibited even by mounting the function only on the host100.

FIG. 31illustrates a configuration of the third embodiment of the computer system. In the third embodiment, the interface driver120and the SSD control tool110described in the first embodiment are mounted on the host100, and the interface controller30in which the RWIF control31and the ROIF controller32can be switched is not mounted on the SSD10side. InFIG. 31, the same reference numerals are denoted on the constituent elements having the same function as the constituent elements illustrated inFIG. 1, and redundant description will be omitted. An interface controller38mounted with only the RWIF controller31is mounted in place of the interface controller30. In the host100of the third embodiment as well, the functions of the host100described in the first embodiment above all can be mounted. In the third embodiment, SSD10itself does not necessarily need to be able to be shifted to RO mode.

In the third embodiment, the SSD control tool110executes operations similar to the operations described inFIG. 25andFIG. 27of the first embodiment. When the host100is started, the host100starts the SSD control tool110. The SSD control tool is desirably automatically started with the startup of the host100by registering the startup menu, the service, or the registry in the Windows (trademark). The SSD control tool may be arbitrarily started by the user with the keyboard134, the mouse135, and the like. When the SSD control tool110is started, the SSD control tool110transmits a transmission request of the statistical information to the SSD100to acquire at least one of the statistical information X01 to X19, X23, X24 of the SSD10in the case ofFIG. 25(FIG. 25: step S220). The transmission request may be SMART READ DATA or a command of S.M.A.R.T, which is a self-diagnostic function of the memory, a SCT Command Transport described in ACS-2, or a command unique to the vendor, as described above.

The SSD control tool110acquires the statistical information (step S221) in such manner. The SSD control tool110compares the statistical information returned from the SSD with a threshold value (e.g., RMAX or RMIN described in first embodiment) (step S222). When using the B0h/D0h SMART READ DATA described in the ACS-2 to acquire the statistical information, the SSD control tool110acquires at least one statistical information of the constituent elements (X01 to X19, X23, X24) of the statistical information26in the form of Attribute Value, Threshold, Worst Value, and Raw Data (Raw Value) illustrated inFIG. 26. The calculation method of the Attribute Value, the Threshold, the Worst Value, and the Raw Data (Raw Value) by the memory controller50is the same as the first embodiment, and the information calculated in such manner is transmitted from the SSD10to the control tool110as the read data with respect to the B0h/D0h SMART READ DATA.

For instance, when using the Attribute Value and the Threshold of the SMART as comparison data for diagnosing the lifespan (or abnormal state) of the SSD10, the SSD control tool110carries out the comparison of the Attribute Value and the Threshold, and the SSD control tool determines that the SSD10reached the end of the lifespan (or abnormal event) when Attribute Value<Threshold (or Attribute Value≦Threshold). If SMAB=100 and AMALR=0.3 as in the first embodiment, the best value of the attribute value with respect to the statistical information to be adopted is 100 (e.g., 100 immediately after shipment), and gradually decreases as the reliability degrades, where the attribute value 30 reaches a value smaller than or equal to 30 when the SSD10can no longer guarantee reliability (when raw data of statistical information becomes greater than or equal to RMAX), and the SSD control tool110determines that the SSD10is to be recognized as the read only memory (step S222: Yes). B0h/DAh SMART RETURN STATUS, which is a command described in ACS-2, is used as a means for detecting whether or not the Attribute Value exceeds the Threshold, and whether or not the Attribute Value exceeds the Threshold value may be determined from the Output of the relevant command.

For instance, when using the Worst Value and the Threshold of the SMART as comparison data for diagnosing the lifespan (or abnormal state) of the SSD10, the SSD control tool110carries out the comparison of the Worst Value and the Threshold, and the SSD control tool determines that the SSD10reached the end of the lifespan (or abnormal event) when Worst Value<Threshold (or Worst Value≦Threshold). If SMAB=100 and AMALR=0.3 as in the first embodiment, the best value of the worst value with respect to the statistical information to be adopted is 100 (e.g., 100 immediately after shipment), and gradually decreases as the reliability degrades, where the worst value 30 reaches a value smaller than or equal to 30 when the SSD10can no longer guarantee reliability (when raw data of statistical information becomes greater than or equal to RMAX), and the SSD control tool110determines that the SSD10is to be recognized as the read only memory (step S222: Yes).

For instance, when using the Raw Data (Raw Value) of the SMART that increases with degradation in the reliability of the SSD10for the comparison data for diagnosing the lifespan (or abnormal state) of the SSD10, the SSD control tool110carries out the comparison of the Raw Value and the RMAX, and the SSD control tool determines that the SSD10reached the end of the lifespan (or abnormal state) when Raw Value≧RMAX (or Raw Value>RMAX). The RMAX is a parameter held on the main memory202such as the SSD control tool110. The RMAX is desirably stored in the SSD10as nonvolatile information when the power supply of the computer system1is turned OFF, and loaded to the main memory202when the SSD control tool is loaded to the main memory202as illustrated inFIG. 5andFIG. 6when the power supply is turned ON. The RMAX is desirably determined at the development of the SSD10as in the first embodiment, and is stored in a region to become the install source of the SSD control tool such as the region of the storage medium400of the WEB server, the storage region of the optical storage medium500, or the region of the USB memory600.

The Raw Value gradually increases as the reliability of the SSD10degrades, where the Raw Value reaches a value greater than or equal to the RMAX when the SSD10can no longer guarantee reliability, and the SSD control tool110determines that the SSD10is to be recognized as the read only memory (step S222: Yes). The RMAX may adopt different values with respect to each constituent element such as the statistical information X01 to X19, S23, and the like.

For instance, when using the Raw Data (Raw Value) of the SMART that decreases with degradation in the reliability of the SSD10as the comparison data for diagnosing the lifespan (or abnormal state) of the SSD10, the SSD control tool110carries out the comparison of the Raw Value and the RMIN, where the SSD control tool determines that the SSD10reached the end of the lifespan (or abnormal state) when Raw Value≦RMIN (or Raw Value<RMIN). The RMIN is a parameter held on the main memory202such as the SSD control tool110. The RMIN is desirably stored in the SSD10as nonvolatile information when the power supply of the computer system1is turned OFF, and loaded to the main memory202when the SSD control tool is loaded to the main memory202as illustrated inFIG. 5andFIG. 6when the power supply is turned ON. The RMIN is desirably determined at the development of the SSD10as in the first embodiment, and is stored in a region to become the install source of the SSD control tool such as the region of the storage medium400of the WEB server, the storage region of the optical storage medium500, or the region of the USB memory600.

The Raw Value gradually decreases as the reliability of the SSD10degrades, where the Raw Value reaches a value smaller than or equal to the RMIN when the SSD10can no longer guarantee reliability, and the SSD control tool110determines that the SSD10is to be recognized as the read only memory (step S222: Yes). The RMIN may adopt different values with respect to each constituent element such as the statistical information X01 to X19, S23, and the like.

For instance, when receiving the statistical information X24 as the RAW Data (Raw Value) of the SMART, and using the same as comparison data for diagnosing the lifespan (or abnormal state) of the SSD10, the SSD control tool110carries out the determination on whether or not the Raw Value is 1, and determines that the SSD10reached the end of her lifespan when Raw Value=1. If the reliability of the SSD10degrades and sufficient number of free blocks cannot be ensured by the memory controller50even by NAND GC, the Raw Value is set to 1 by the memory controller50, and the SSD control tool110determines to recognize the SSD10as a read only memory (step S222: Yes).

If determined that the RO mode shift condition is met in the SSD10as a result of the comparison of step S222, that is, if determined that the SSD10is to be recognized as the read only memory (step S222: Yes), the ROIF driver122is validated (step S225). The SSD control tool110may cause the operating system150to recognize the SSD10as the read only memory by operating the system parameter of the operating system150inFIG. 12. The SSD control tool110desirably transmits a reset command, or the like and re-starts the SSD10before the step S225(S224).

It is desirable that the SSD control tool110periodically carries out the procedures of steps S220, step S221, and step S222(in the case ofFIG. 25) illustrated inFIG. 25,FIG. 27and the like, that is, the transmission request of the statistical information to the SSD10and the determination to recognize the SSD10as the read only memory even while the host100is operating. For instance, the SMART READ DATA may be issued every constant time, and whether or not to recognize the SSD10as the read only memory may be determined. The request and the determination may be carried out at the startup of the host100, or the request and the determination may be carried out only after the startup of the host100to reduce the number of interrupt processing of the SSD control tool110. If determined to recognize the SSD10as the read only memory, the ROIF driver122of the interface driver120is validated. After recognizing the SSD10as the read only memory to reduce the number of interrupt processing of the SSD control tool110, the transmission request of the statistical information and the RO mode shift determination are desirably not carried out.

The SSD control tool110may carry out the request and the determination when recognizing the startup or the connection of the SSD10. For instance, if the interface90is the SATA interface, determination is made that the SSD10is started or connected when the status register related to the SSD10of the host100becomes from 7Fh to 50h, and then the request and the determination may be carried out.

The determination to recognize as the read only memory may be carried out by the memory controller50, and the SSD control tool110may receive only the determination result through the SMART READ DATA, the SCT Command Transport, or the command unique to the vendor. For instance, the SSD control tool110receives the numerical value 0 as the Attribute Value from the SSD10by the SMART READ DATA if determined to be recognized as the read only memory by the memory controller50at the criterion similar to the first embodiment, and receives the numerical value 100 in other times (normal time), where the numerical value 70 is received as the Threshold for both cases of recognizing and not recognizing as the read only memory, and determination is made to recognize as the read only memory if Attribute Value<Threshold (step S222: Yes) and to not recognize as the read only memory if Attribute Value>Threshold (step S222: No). It should be apparent that the Worst Value and the Raw Value may be used for the reception of the determination result.

When adopting the current temperature X20, the highest temperature X21, and the lowest temperature X22 for the statistical information, the temperature abnormality has a possibility of being temporary, and hence the ROIF driver is invalidated and the RWIF driver is validated after the SSD control tool110validates the ROIF driver in step S225when Attribute Value≧Threshold (or Attribute Value>Threshold) and determination is made that the normal state is returned.

The ROIF driver122is desirably configured to not transmit the write command with respect to the SSD10at all from the standpoint of preventing the loss of user data caused by data breakage or damage of the SSD10. However, if there is a need to write the data of one part such as the system information of the operating system in the SSD10, the ROIF driver122may permit the write of the relevant data to the SSD10as an exception but the data amount of the relevant data is desirably sufficiently small with respect to the capacity of the NAND memory20. More desirably, in order to prevent the user from transmitting the write command by mistake and writing the data to the SSD10, the ROIF driver122does not transmit the normal write command with respect to the SSD10at all such as 35h WRITE DMA EXT and 61h WRITE FPDMA QUEUED described in ACS-2, and the write with respect to the SSD10is desirably permitted by only the command using a special command such as the SCT Command Transport described in INCITS ACS-2 and other commands unique to the vendor if there is an exceptional need to write the data to the SSD10.

In the third embodiment as well, as illustrated inFIG. 5, the SSD control tool110is stored in the region110A of the NAND memory20of the SSD10when the power supply of the host device100is turned OFF, but is loaded from the region110A to the region110at the startup of the host device100or the startup of the program. As illustrated inFIG. 6, if a plurality of external storage devices is connected to the host device, the SSD control tool may be stored in a region110B of the nonvolatile storage device300different from the SSD10as the SSD10, and may be loaded from the region110B to the region110at the startup of the host device100or the startup of the program. In particular, if the nonvolatile storage device300is used as a system drive for storing the OS, and the SSD10is used as a data drive for storing user data such as documents, still image data, and moving image data, it is desirable to store the control tool in the nonvolatile storage device300serving as the system drive from the standpoint of clearly separating the roles of the drive10and the drive300such as using the system drive300as a drive for mainly storing the OS and the application program and using the data drive10as a drive for storing the user data.

In the third embodiment as well, as illustrated inFIG. 5andFIG. 6, it is desirable for the computer system1to be shipped with the SSD control tool stored in the SSD10or the nonvolatile storage device300, put on the shelves, and provided to the user from the standpoint of saving the effort of the user in carrying out the setup of the control tool. From the standpoint of enabling the user to select whether or not to install the SSD control tool and from the standpoint of providing the most recent control tool to the user, the control tool is desirably stored in the SSD10or the nonvolatile storage device300by being downloaded from the WEB illustrated inFIG. 7, installed from the DVD-ROM illustrated inFIG. 8, and installed from an external storage medium such as USB memory illustrated inFIG. 9. In the third embodiment as well, the optical medium500and the USB memory600are desirably packaged and sold with the SSD10as accessories at the time of shipment of the SSD10from the standpoint of facilitated availability by the user. The optical medium500or the USB memory600may be sold alone as software product or may be attached as a supplement to magazines and books.

Therefore, the SSD control tool110mounted on the host100determines the reliability state (statistical information) of the SSD10, and selects the interface driver for the SSD based on the determination result, and hence it appears to the OS and other software as if the SSD10switched from the readable and writable external storage device to the write non-supporting external storage device when the reliability of the SSD10is degraded (when the end of lifespan is reached, in abnormal state). Therefore, the SSD10with degraded reliability acts as a read only device to the OS and the software, so that the host100can handle the SSD10as a general read only external storage device such as the CD-ROM or the DVD-ROM.

Fourth Embodiment

In the first and second embodiments, the SSD10transmits the information that the SSD10is a read only device to the host100. Using an interface relay device700prepared separate from the SSD10, the interface relay device700may transmit to the host100information that the SSD10is a read only device. The interface relay device700is called a read only bridge. In the fourth embodiment, SSD10itself does not necessarily need to be able to be shifted to RO mode.

FIG. 32illustrates a state in which the read only bridge700is connected to the computer system illustrated inFIG. 10.FIG. 33is a block diagram illustrating a computer system of a fourth embodiment in which the read only bridge is connected. The read only bridge700is configured to transmit the information of being the read only device to the host100. The information of being the read only device may be the command GET CONFIGURATION (46h) described above that is adopted in the MMC-6, or may be other commands. Furthermore, the read only bridge700is configured to play the role of a relay of the host side interface and the SSD side interface such as transmit various commands and responses received from the host100to the SSD10and transmit various commands and responses received from the SSD10to the host100. If the interface standards of the host side interface and the SSD side interface differ, the read only bridge700converts the received command and response to comply with the transmission side interface, and then transmits the same. If the host side interface is the SATA interface, the read only bridge700may be configured to explicitly indicate to the host100that the SSD10is the ATAPI device. For instance, in the Device Signature described in ACS-2, LBA(7:0) is output to 01h, LBA(15:8) to 14h, and LBA(23:16) to the host100as EBh, so that notification can be made to the host100that the SSD10is the ATAPI device.

During the normal use of the host100, the SSD10is connected to the motherboard130of the host100by the SATA cable serving as the ATA interface90or the USB cable, as illustrated inFIG. 10. When the SSD control tool110mounted on the host100acquires the statistical information by the S.M.A.R.T information described in the ACS-2 described above, and determines that the reliability of the SSD10is degrading when the condition of statistical information>RMAX, statistical information<RMIN, or X24=1 is met by the comparison of the management information and the threshold value, the SSD control tool110displays a warning window (or warning dialogue) including a message such as “lifespan of SSD coming to end. Connect device side terminal of read only bridge to SSD, connect host side terminal of read only bridge to personal computer, and backup data of SSD” on the display133. The threshold value (RMAX, RMIN, etc.) to be compared with the management information may be held in the host100so that the SSD control tool110can carry out the determination on the degradation of the reliability or the threshold value may be held in the SSD10so that the memory controller50of the SSD10can carry out the determination on the degradation of the reliability and the memory controller50may transmit only the information that the management information exceeded the threshold value to the host100.

As illustrated inFIG. 32, the user connects the SSD10and the read only bridge700with the SATA cable, the USB cable, or the like, and connects the read only bridge700and the motherboard130with the SATA cable, the USB cable, or the like according to the warning message displayed on the display133.

When the host100is thereafter started, the read only bridge700transmits information that the SSD10is the read only device to the host100. The host100then applies the read only driver of the read only ATAPI driver as the interface driver170of the read only bridge700, and the SSD10is recognized as the read only device such as the CD-ROM and the DVD-ROM on the host. On the other hand, the read only bridge700may be configured to explicitly indicate to the host100that the SSD10is the ATA device, and may be configured to return to the host100that all write functions are non-supportive when receiving the device identification information such as the command ECh IDENTIFY DEVICE described in the ACS-2 from the host100through the ATA interface. The method of notifying whether or not the SSD10is a read only device may take various other forms.

In the embodiment, when the write is disabled with respect to the SSD or when the write operation with respect to the SSD is not guaranteed. The host can carry out the readout operation on the SSD10by simply connecting the read only bridge700between the host100and the SSD even under situations where the write operation with respect to the SSD may lead to defect in data of the SSD or failure of the SSD.

The system disc used to start up the host under the situation in which the read only bridge700is connected may be the SSD10, or may be an SSD or a hard disc drive (HDD) prepared separate from the SSD10pre-installed with the system, or may be a DVD-ROM, a CD-ROM, or USB memory installed with a boot program.

Even when the read only bridge700is connected, the host100may hold the SSD control tool110having the function of backing up the data of the SSD or other software. When detecting that the read only bridge700is connected, the software having the backup function displays a message such as “read only bridge is connected. Back up data of SSD?” as well as the “OK” button and the “Cancel” button for selecting the necessity of backup in the window of the software. The backup starts when the “OK” button is clicked with the mouse135, and the display of the message disappears without carrying out the backup when the “Cancel” button is clicked with the mouse135. The backup can be carried out later even if the “Cancel” button is pushed with the mouse135.

In the first to fourth embodiments, a case in which the NAND memory is adopted for the nonvolatile memory has been described, but the first to fourth embodiments may be applied to nonvolatile memory other than the NAND memory such as the hard disc drive (HDD) for the nonvolatile memory. The nonvolatile memory may be a semiconductor storage medium in which the memory cells are arranged three-dimensionally as shown in U.S. Patent Application Publication No. 2010 0172189 and U.S. Patent Application Publication No. 2010 0254191.