Disk Controller Operation Control Parameters for Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing disk protection mechanisms are vulnerable to illegal operations, such as unauthorized modification, due to bypassing of security measures by attackers, and they often fail to provide real-time protection during data generation.
Innovation Solution
A disk operation protection method and controller that obtain and enforce operation control parameters, specifically operation control time parameters, to determine if a disk area is allowed to be operated, thereby preventing illegal operations by controlling reading and writing operations independently of application software and operating systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data protection is implemented through upper-layer application software or operating system file rights management, then data security is improved, but the protection mechanism can be bypassed by attackers obtaining super user rights or manipulating system loopholes
Solution Approach 1:
The patent introduces a disk operation protection mechanism as an intermediary layer between the operating system and the disk. This mechanism intercepts and controls disk operations at the driver level, independent of application software and operating system file rights management. By positioning the protection mechanism at this intermediate layer, it prevents attackers from bypassing security through super user rights or system loopholes, as the protection operates at a lower, more fundamental level in the system architecture.
2Reliability
If the whole LUN on the storage device is protected by setting rights, then data security is improved, but the saving operation becomes unavailable during data generation process
Solution Approach 1:
The patent implements selective protection by allowing different disk areas to have different protection states. During data generation, only specific disk areas that contain sensitive or finalized data are protected, while other areas remain writable. This enables the saving operation to remain available for non-protected areas, resolving the contradiction between comprehensive security and operational availability.
Solution Approach 2:
The protection mechanism dynamically adjusts the protection status of disk areas based on the data generation process. Disk areas transition between protected and unprotected states as needed, allowing the system to provide security when required while maintaining operational flexibility. This dynamic approach enables saving operations during data generation in unprotected areas while maintaining security in protected areas.
3Stability of the object's composition
If disk operations are controlled through operating system file rights, then data integrity is improved, but the protection can be circumvented by system time manipulation or security mechanism loopholes
Solution Approach 1:
The disk operation protection mechanism serves as an intermediary that operates independently of operating system file rights and system time. By intercepting disk operations at the driver level, it validates protection criteria without relying on OS time stamps or file rights that can be manipulated or circumvented. This intermediary position ensures data integrity through a more secure, isolated validation process.
Data Source
AI summary
A disk operation protection method and a disk controller are disclosed herein. The method includes: receiving a request for a disk operation; obtaining, by a disk controller, operation control parameters corresponding to the current disk area to be operated, and determining whether to allow operation of the current disk area according to the operation control parameters; if determining that the current disk area is allowed to be operated according to the operation control parameters, performing the disk operation. By implementing the embodiments of the present disclosure, the operation of the data stored in a disk is protected, illegal disk operations such as maliciously intended modification are prevented, the disk is protected in the process of generating data, and the defects of the disk protection mechanism in the prior art are overcome.