Patent ID: 8112601

Claim:
A data storage device comprising: at least two partitions; and a set of manually operated switches; wherein said manually operated switches can be independently set for each partition into each of read/write, read only, and disabled modes; wherein read/write and/or write operations for at least one of said partitions is disabled by a user when said data storage device is believed to be accessible by one or more potentially malicious processes; wherein said set of manually operated switches comprises at least one mechanical switch mounted such that it can be manually operated from outside the outer case of any computing machine using said data storage device; and wherein said set of manually operated switches further comprises a mode switch, wherein the positions of said mode switch enable and disable reading and writing separately for each of said partitions according to a predetermined set of rules; further comprising separate partitions for (1) operating systems and trusted applications, (2) applications from non-trusted sources, (3) confidential data, (4) non-confidential data, and (5) all other data; wherein said mode switch has four positions and the predetermined set of rules is defined by the following table: Position Partition 1 Partition 2 Partition 3 Partition 4 Partition 5 1 Read only Read only Disabled Read only Read/write 2 Read only Read only Read/write Read/write Disabled 3 Read only Read/write Disabled Read only Disabled 4 Read/write Read/write Read/write Read/write Read/write.