Patent ID: 8413242

Claim:
An external storage device adapted for detachable attachment to an external device, comprising: an interface configured to connect to the external device; a storage portion configured to encrypt and store data; a decryption portion configured to decrypt the stored data of the storage portion; an authentication portion configured to authenticate whether access to the storage portion from the external device via the interface is legitimate; and an access control portion configured to control access to the storage portion by the external device through the interface, wherein in case where the access to the storage portion from the external device is authenticated to be legitimate by the authentication portion, the access control portion performs permission control, wherein, in the permission control, the access control portion controls the decryption portion to decrypt the stored data of the storage portion according to access to the storage portion from the external device being legitimate after the successful authentication; in case where connection between the external device and the interface is lost, the access control portion performs prohibition control, wherein, in the prohibition control, the access control portion does not control the decryption portion to decrypt the stored data of the storage portion according to access to the storage portion from the external device being legitimate even after the successful authentication; and an authentication state storage portion configured to store information, wherein the access control portion stores in the authentication state storage portion information which shows the access from the external device is legitimate, in case where the access to the storage portion from the external device is authenticated to be legitimate by the authentication portion; and cancels the information of the legitimateness, in case where the connection between the external device and the interface is lost, wherein when access to the storage portion is required by the external device after the authentication that the access to the storage portion from the external device is legitimate, the access control portion performs the permission control, in case where the information of the legitimateness is stored in the authentication state storage portion and is not cancelled, and when access to the storage portion is required by the external device after the authentication that the access to the storage portion from the external device is legitimate, the access control portion performs the prohibition control, in case where the information of the legitimateness is not stored in the authentication state storage portion or is cancelled.