BMC Dynamic Write Protection for Storage Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current baseboard management controller (BMC) technologies lack effective dynamic write protection mechanisms for storage devices, which are critical for ensuring data integrity and security, especially in scenarios where partial or complete write protection of storage devices is required.
Innovation Solution
A system and method utilizing a BMC with a processor and non-volatile memory that executes computer executable code to perform redirection of storage devices, receive and process write protect commands, and determine data writability based on stored write protect information, including mode identifiers, device identifiers, and address values, to enforce dynamic write protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If storage devices are exposed by BMC for read/write access, then accessibility and usability are improved, but data security and integrity deteriorate due to lack of write protection
Solution Approach 1:
The patent introduces an intermediary layer between the computing device and storage device that intercepts write commands. This intermediary checks write protect information stored in the BMC's non-volatile memory and determines whether to allow or block write operations, thus mediating between accessibility and data integrity requirements
Solution Approach 2:
The system implements feedback by storing write protect information in the BMC and using this information to dynamically control write access. The BMC continuously references this stored information to make real-time decisions about whether to permit write operations, creating a closed-loop control system that maintains data integrity
2Reliability
If write protection is implemented for storage devices, then data security is improved, but operational flexibility deteriorates due to restricted write access
Solution Approach 1:
The patent implements dynamic write protection where the BMC can change write access permissions based on stored write protect information. The system is not static but can dynamically adjust between allowing and blocking write operations depending on the specific command and stored protection rules, providing both security and flexibility
Solution Approach 2:
The system applies write protection selectively to specific portions of storage devices rather than uniformly to entire devices. By examining write protect information that may reference specific address ranges, the system can protect only sensitive portions while allowing write access to other areas, providing localized security control
3Reliability
If dynamic write protection is implemented, then data integrity is improved, but system complexity increases due to additional command processing
Solution Approach 1:
The patent performs preliminary action by pre-storing write protect information in the BMC's non-volatile memory before write operations occur. This advance preparation allows the BMC to quickly reference pre-defined protection rules during operation, avoiding complex real-time analysis and reducing processing complexity
Data Source
AI summary
A system including a baseboard management controller (BMC) and a storage device connected to the BMC, for dynamic protection of the storage device. The BMC includes a processor and a non-volatile memory storing a computer executable code. The computer executable code, when executed at the processor, is configured to: perform redirection of the storage device; receive a write protect command including write protect information of the storage device; extract the write protect information from the write protect command; store the write protect information in a data store of the non-volatile memory; and in response to receiving a write command to write data in the storage device, determine whether the data is writable to the storage device based on the write protect information stored in the data store. The data is written to the storage device only if it is determined that the data is writable to the storage device.