External Storage Read Control Information Validity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Encrypted data stored on nonvolatile storage devices can be easily decrypted if the encryption algorithm and key are known, leading to potential information leakage when the devices are lost or stolen.
Innovation Solution
An information-processing device and program that determines the validity of read control information, extracts and decrypts genuine read control information from virtualized data, and stores invalid read control information to prevent access to encrypted data, using a security identifier or domain name for additional authentication and encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted data is stored in a storage device, then information security is improved, but the data can be easily decrypted if the encryption algorithm and key are known
Solution Approach 1:
The patent applies preliminary action by pre-storing invalid read control information in the storage device before it is lost or stolen. When the device is accessed by an unauthorized system, the invalid control information causes the storage device to be formatted, preventing access to encrypted data. This preliminary setup ensures that even if encryption keys are compromised, the data remains protected through the pre-configured invalid control information mechanism.
2Reliability
If read control information is stored in the storage device, then data access control is improved, but the storage device can be formatted by ordinary information-processing devices when the control information is invalid
Solution Approach 1:
The patent applies local quality by making the read control information device-specific. The control information contains a domain name or security identifier that must match the information-processing device it was created for. This means the control information has different properties for different devices - valid for the authorized device, invalid for others. When an unauthorized device attempts to access the storage, the mismatch causes formatting, while the authorized device can access normally.
3Reliability
If the storage device is formatted when read control information is invalid, then unauthorized access is prevented, but legitimate access may be blocked if the control information becomes corrupted
Solution Approach 1:
The patent applies feedback by implementing a verification mechanism that checks whether the read control information matches the domain name or security identifier of the accessing information-processing device. This feedback loop allows the system to distinguish between unauthorized access (mismatched control information) and legitimate access (matched control information). Only when there is a mismatch does the system proceed to format the storage device, ensuring that legitimate users with correct control information can access their data without interruption.
Data Source
AI summary
[PROBLEMS] To more infallibly prevent leak of information because loss or theft. [MEANS FOR SOLVING PROBLEMS] It is judged whether or not read control information stored in a predetermined read control information storage area of an external storage is proper. If the judgment result shows that it is invalid, virtualized data stored in the external storage is decrypted, and genuine read control information virtualized in the virtualized data is extracted. It is judged whether or not the extracted genuine read control information is proper. If the extracted genuine read control information is proper, the virtualized genuine data in the virtualized data along with the genuine read control information is made usable by decrypting and creating the virtualized data, and improper read control information is stored in the read control information storage area. The proper genuine read control information and genuine data are encrypted to create virtualized data. The virtualized data is stored in a data storage area of the external storage corresponding to the read control information storage area.