A storage device to be connected to a terminal host includes a control module to be connected to the host, and a biometrics sensor and a storage unit both connected to the control module. The host runs a biometrics application program (AP) to inform the control module to control the sensor to read to-be-identified biometrics data of a user and to determine whether the to-be-identified biometrics data matches with biometrics template data stored in the storage device. When the two sets of data match with each other, the host runs a host-specific-code generating program to generate and transfer a host specific code to the control module. The control module generates a device specific code using a device-specific-code generating program stored therein, determines whether the codes match with each other, and enables the host to access a data protection unit of the storage device when the codes match with each other.