Data Encryption Device for Hot Swap Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

When a data processing device supports hot swapping interfaces like USB or SATA, there is a risk of unauthorized access to encrypted data as the connection cable can be plugged into a different computer system without re-authentication, compromising data confidentiality.

Innovation Solution

A data encryption device is introduced between the computer system and the external storage device, which operates in modes to ensure authentication and encrypt/decrypt data, switching to a blocking mode if the connection is changed, preventing unauthorized access by maintaining authentication and encryption processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If hot swapping is supported for interface connectivity, then ease of operation is improved, but data security is worsened due to unauthorized access risk

Engineering Contradiction:
Improveease of connectionVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The data processing device performs authentication before allowing data transfer. The authentication process is executed in advance when the interface is connected, and the result is stored in a non-volatile memory to maintain the authenticated state across power cycles, preventing unauthorized access while enabling hot swapping

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The device continuously monitors the connection state and authentication status through feedback mechanisms. When the interface connection is detected or power is cycled, the system checks the authentication state and adjusts access permissions accordingly, ensuring security is maintained while allowing flexible connection changes

Inventive Principle:
Principle #23Feedback

2Reliability

If authentication process is performed on each connection, then data security is improved, but device complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidauthentication mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication result is stored in non-volatile memory as a preliminary action, eliminating the need for repeated authentication processes. This maintains security while reducing the complexity of continuous authentication checks

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system uses the stored authentication state to automatically maintain secure access without requiring continuous user intervention or re-authentication. The device serves itself by utilizing the pre-stored authentication results to control access permissions

Inventive Principle:
Principle #25Self-service

3Ease of operation

If authentication state is maintained across power cycles, then ease of operation is improved, but data security is worsened due to potential unauthorized access

Engineering Contradiction:
Improveauthentication convenienceVSAvoidaccess control
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication state is preliminarily established and stored in non-volatile memory before power cycling occurs. This allows the authenticated state to be maintained across power cycles without requiring re-authentication, while the security is ensured by verifying the authentication status before allowing any data access operations

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2269157B1Data processing device
Publication Date: 2022.11.23 CANON KK
  • EP2269157B1 patent drawingFigure 1
  • EP2269157B1 patent drawingFigure 2
  • EP2269157B1 patent drawingFigure 3

AI summary

When a data processing device is disconnected from a computer system after mutual authentication has been completed between the computer system and the data processing device, the data processing device cancels an authenticated state, and is not able to transfer data to a device other than a specific computer system. Therefore, even when the data processing device is connected to a device other than the specific computer system after the connection of a cable supporting hot swapping has been changed, the data processing device maintains the confidentiality of data.