Cryptographic Module Isolating Key Storage in Self-Encrypting Drives
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current self-encrypting drives have security flaws, such as vulnerable cryptographic keys that can be accessed by hackers, and are susceptible to malware attacks, compromising data security.
Innovation Solution
A cryptographic module with a secure processor is introduced, isolating the cryptographic functions from the host processor and firmware, and incorporating a secure memory inaccessible to external entities, which includes a secure processor, mailbox memory, cryptographic engine, and one-time-programmable memory to store cryptographic keys, ensuring secure key storage and execution of cryptographic commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic key is stored in the drive, then data encryption is enabled, but the key can be obtained by hackers compromising security
Solution Approach 1:
The system separates cryptographic functions into a dedicated cryptographic module with its own processor and memory, isolating the key storage from the main drive controller. This segmentation prevents hackers from accessing keys through the main controller while enabling secure encryption operations.
Solution Approach 2:
A memory module acts as an intermediary between the first processor and the cryptographic device, preventing direct access to the cryptographic key stored in the second memory. The intermediary architecture ensures that even if the main processor is compromised, the cryptographic key remains protected in the isolated cryptographic module.
2Adaptability or versatility
If the drive downloads and executes malware, then functionality is extended, but access to stored data is compromised
Solution Approach 1:
The system divides the drive into two separate processing domains: a main processor for general operations and a dedicated cryptographic processor for security operations. This segmentation prevents malware executed by the main processor from accessing cryptographic keys or interfering with secure decryption operations.
Solution Approach 2:
The memory module serves as an intermediary that controls and monitors all access to cryptographic resources. Even if malware compromises the main processor, it cannot directly access the cryptographic key or instruct the cryptographic device, as all communications must pass through the secured memory module interface.
3Reliability
If cryptographic module isolates key storage, then security is improved, but system complexity increases
Solution Approach 1:
The cryptographic module combines multiple security functions (key storage, key protection, decryption operations) into a single integrated unit within the drive. This merging approach improves security by isolating cryptographic resources while managing complexity through functional integration rather than separate components.
Data Source
AI summary
A storage drive includes a first memory that stores first text. A first processor generates a first instruction to decrypt the first text. A cryptographic module includes a second memory, a cryptographic device, a memory module, and a second processor. The second memory is inaccessible to the first processor and stores a cryptographic key. The cryptographic device accesses the second memory to obtain the cryptographic key and based on the first instruction, decrypts the first text. The memory module stores a status of execution of the first instruction by the cryptographic device. The second processor, prior to the cryptographic device decrypting the first text, forwards the first instruction to the cryptographic device and stores the status of execution of the first instruction in the memory module. The memory module is connected between the first and second processors and isolates the first processor from the second processor.