Connection Interface Control Device for Write Blocking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current write blocking systems, both software and hardware, face challenges in ensuring data integrity during read-only access to storage devices, with software blockers being difficult to verify and hardware blockers being costly and complex, leading to performance degradation due to bridging components.

Innovation Solution

A combination write blocking system that includes a hardware connection interface control device communicating with a host processor, using a switch to selectively establish a communication path between a protected storage drive and the host processor, while filtering commands to prevent data alteration, thereby ensuring read-only access without the need for complex hardware or software-only solutions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If software write blockers are used, then data integrity is maintained, but verification difficulty increases and operational complexity increases

Engineering Contradiction:
Improvedata integrityVSAvoidverification difficulty
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a hardware connection interface control device as an intermediary between the host processor and storage drive. This device includes a controller chip that physically intercepts write commands and prevents them from reaching the storage drive, while allowing read commands to pass through. The hardware intermediary provides tangible, verifiable write blocking functionality that resolves the verification difficulty associated with software-only solutions while maintaining data integrity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If hardware write blockers are used, then ease of operation improves, but device complexity and cost increase

Engineering Contradiction:
Improveease of useVSAvoidhardware complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent segments the write blocking functionality into a separate, dedicated hardware component (connection interface control device) that can be independently implemented and verified. This segmentation allows the write blocking function to be isolated from the host system complexity, providing a simple plug-and-play interface control device with a controller chip that handles write blocking independently, thereby reducing overall system complexity while improving ease of operation.

Inventive Principle:
Principle #1Segmentation

3Reliability

If hardware bridges are used for write blocking, then write command interception improves, but performance degradation increases

Engineering Contradiction:
Improvewrite command blockingVSAvoidsystem performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent replaces complex hardware bridging mechanisms with a more efficient connection interface control device that uses a controller chip to directly intercept and filter write commands at the interface level. This substitution eliminates the performance degradation associated with traditional hardware bridges by implementing write blocking at the connection interface rather than through cumbersome bridging components, thereby maintaining high data transfer speeds while ensuring reliable write command interception.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11334510B1Systems and methods for combination write blocking with connection interface control devices
Publication Date: 2022.05.17 CRU DATA SECURITY GRP LLC
  • US11334510B1 patent drawing
  • US11334510B1 patent drawing
  • US11334510B1 patent drawing

AI summary

A write blocking system may include a host computer. The host computer may include a host processor configured as a blocking driver. A separate connection interface device may be is configured to be operatively coupled to the host processor, and include a switch and a connection interface control device, such as a processor assembly. The switch may be connected to a storage drive. The connection interface control device may communicate with the blocking driver while the connection interface control device is operatively coupled to the host processor. The connection interface control device may selectively establish communication between the storage drive and the host processor by operating the switch after communication between the connection interface control device and the blocking driver. The blocking driver may filter commands from the host processor that are directed to the connected storage drive.