Distributed Secret Generation for Storage Media Relocation Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems face challenges in securely erasing data, particularly in software-defined storage (SDS) environments, where ensuring data security and preventing unauthorized access or relocation of storage media are concerns.
Innovation Solution
The implementation of a distributed secret generation and recovery system using threshold encryption and Shamir's Secret Sharing Scheme, which allows for secure distribution and reconstitution of security credentials, enabling secure data erasure and preventing unauthorized access or media relocation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic erase is used to securely delete data, then data security is improved, but the risk of accidental key destruction and loss of access to data increases
Solution Approach 1:
The encryption key is divided into multiple shares using Shamir's Secret Sharing Scheme. These shares are distributed across different storage devices in the array. To recover the key, a threshold number of shares must be collected, providing both security against single-point failures and protection against accidental destruction of individual key instances.
Solution Approach 2:
The system enables the encryption key to be securely destroyed (discarded) from individual storage devices while maintaining the ability to recover the key through threshold reconstruction from remaining shares. This allows cryptographic erase of data on specific devices without permanently losing access to the encrypted data.
2Loss of information
If copies of encryption key are stored elsewhere to prevent accidental destruction, then access to data is maintained, but security threat from unauthorized access increases
Solution Approach 1:
Instead of storing complete key copies in multiple locations, the key is segmented into shares distributed across storage devices. The threshold requirement ensures that no single location or small group of devices can reconstruct the key, reducing the attack surface while maintaining access capability.
Solution Approach 2:
The Shamir's Secret Sharing Scheme acts as an intermediary mechanism between key storage and key recovery. It enables controlled reconstruction of the key from distributed shares, providing both security through distribution and access through threshold reconstruction without requiring full key copies anywhere.
3Adaptability or versatility
If storage media is removed without authorization, then operational flexibility is improved, but system security and data protection are compromised
Solution Approach 1:
The system implements monitoring and detection mechanisms that provide feedback when storage media is removed or relocated. This feedback enables the system to detect unauthorized removal events and trigger appropriate responses, such as alerting administrators or preventing further operations, thereby maintaining security while allowing authorized operational flexibility.
Data Source
AI summary
An apparatus includes a cryptographic key for encrypting content to be written to a storage media. The apparatus includes a control circuit configured to determine that the storage media has been physically moved, and, based on the determination that the storage media has been physically moved, erase the storage media by deleting the cryptographic key.