Data Encryption Device for Hot Swap Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
When a data processing device supports hot swapping interfaces like USB or SATA, there is a risk of unauthorized access to encrypted data as the connection cable can be plugged into a different computer system without re-authentication, compromising data confidentiality.
Innovation Solution
A data encryption device is introduced between the computer system and the external storage device, which operates in modes to ensure authentication and encrypt/decrypt data, switching to a blocking mode if the connection is changed, preventing unauthorized access by maintaining authentication and encryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If hot swapping is supported for interface connectivity, then ease of operation is improved, but data security is worsened due to unauthorized access risk
Solution Approach 1:
The data processing device performs authentication before allowing data transfer. The authentication process is executed in advance when the interface is connected, and the result is stored in a non-volatile memory to maintain the authenticated state across power cycles, preventing unauthorized access while enabling hot swapping
Solution Approach 2:
The device continuously monitors the connection state and authentication status through feedback mechanisms. When the interface connection is detected or power is cycled, the system checks the authentication state and adjusts access permissions accordingly, ensuring security is maintained while allowing flexible connection changes
2Reliability
If authentication process is performed on each connection, then data security is improved, but device complexity increases
Solution Approach 1:
The authentication result is stored in non-volatile memory as a preliminary action, eliminating the need for repeated authentication processes. This maintains security while reducing the complexity of continuous authentication checks
Solution Approach 2:
The system uses the stored authentication state to automatically maintain secure access without requiring continuous user intervention or re-authentication. The device serves itself by utilizing the pre-stored authentication results to control access permissions
3Ease of operation
If authentication state is maintained across power cycles, then ease of operation is improved, but data security is worsened due to potential unauthorized access
Solution Approach 1:
The authentication state is preliminarily established and stored in non-volatile memory before power cycling occurs. This allows the authenticated state to be maintained across power cycles without requiring re-authentication, while the security is ensured by verifying the authentication status before allowing any data access operations
Data Source
Figure 1
Figure 2
Figure 3
AI summary
When a data processing device is disconnected from a computer system after mutual authentication has been completed between the computer system and the data processing device, the data processing device cancels an authenticated state, and is not able to transfer data to a device other than a specific computer system. Therefore, even when the data processing device is connected to a device other than the specific computer system after the connection of a cable supporting hot swapping has been changed, the data processing device maintains the confidentiality of data.