Drive Controller Override Mechanism for Ransomware Isolation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Ransomware attacks on cloud storage devices pose a significant challenge in protecting user data, as existing solutions are inadequate in isolating data from compromised firmware, leading to potential data loss and costly resolutions.

Innovation Solution

A data storage device with a controller-override mechanism that can be selectively engaged by a user to prevent the drive storage controller from altering the primary storage media, thereby isolating user data and allowing for safe firmware replacement without jeopardizing stored data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the drive storage controller is used to manage data storage operations, then data storage and retrieval functionality is enabled, but the system becomes vulnerable to ransomware attacks that can compromise firmware and alter user data

Engineering Contradiction:

Improvedata storage functionalityVSAvoidransomware attack vulnerability

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system separates the storage media control path into two independent segments: a primary path through the drive storage controller for normal operations, and a secondary path through the media controller for override operations. This segmentation allows the media controller to independently protect user data by directly controlling media recording electronics without passing through the potentially compromised drive storage controller firmware.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The media controller acts as an intermediary component between the host interface and the media recording electronics. It provides an additional layer of control that can override commands from the drive storage controller, preventing malicious firmware from directly altering user data on the storage media.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If firmware is updated to address security vulnerabilities, then system security can be improved, but there is risk that compromised firmware may prevent successful updates or corrupt data during the process

Engineering Contradiction:

Improvefirmware update capabilityVSAvoiddata corruption risk during update

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The media controller can be pre-configured with override capabilities before a ransomware attack occurs. This preliminary setup ensures that when firmware updates are needed, the media controller can immediately prevent compromised firmware from interfering with the update process or corrupting user data, allowing safe firmware replacement.

Inventive Principle:

Principle #10Preliminary action

3Ease of operation

If cloud storage providers pay ransom to restore encrypted data, then data accessibility is restored, but significant financial loss occurs and does not guarantee data security

Engineering Contradiction:

Improvedata accessibilityVSAvoidfinancial loss

Core Design Contradiction:

Ease of operationVSLoss of energy

Solution Approach 1:

The system implements a protective mechanism in advance that cushions against the harmful effects of ransomware attacks. By enabling the media controller to override and block malicious firmware commands before they can encrypt user data, the system prevents data loss and eliminates the need for costly ransom payments, while maintaining data accessibility through legitimate update processes.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS11335376B1Drive controller-override mechanism

Publication Date: 2022.05.17 SEAGATE TECH LLC

AI summary

A data storage device includes a primary storage media, a drive storage controller electrically coupled to media recording electronics and a controller-override mechanism. The controller-override mechanism is selectively controllable by a user to override control actions of the drive storage controller to prevent the drive storage controller from altering the primary storage media at a time when the storage device is otherwise configured for nominal data storage operations.