Fingerprint-Gated Flash Storage Access Using Selective L2P Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage devices lack secure access mechanisms that prevent unauthorized access to confidential data when left unattended, as they often provide unrestricted access once a password is entered, compromising user data privacy.
Innovation Solution
A data storage device equipped with a fingerprint sensor and a flash translation layer module that enables selective access restrictions based on user fingerprints, using a logical to physical table to restrict access to specific user data partitions and physical blocks, and allows configuration of operating protocols, firmware, and data protection modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password protection is enabled to protect confidential data, then data security is improved, but access convenience deteriorates because the entire drive becomes locked and all users cannot access their data
Solution Approach 1:
The patent segments the storage device into multiple namespaces (NS0, NS1, NS2, etc.), each accessible by specific users through their fingerprint. The FTL module divides the L2P table into portions, each mapped to a specific namespace. When user A authenticates, only their namespace and corresponding L2P portion are accessible, while other namespaces remain hidden. This segmentation allows multiple users to share the device with individual data isolation, resolving the contradiction between security and accessibility.
2Reliability
If multiple partitions are created to separate user data, then user privacy is improved, but device complexity increases due to additional partition management overhead
Solution Approach 1:
The patent implements a universal namespace management system where the FTL module handles multiple namespaces through a single unified interface. The system provides multi-functionality by supporting fingerprint-based authentication, automatic namespace mapping, and dynamic L2P table portion allocation. This universal approach allows the device to serve multiple users with different privacy requirements while maintaining a single management layer, reducing the complexity that would arise from separate partition management for each user.
3Reliability
If fingerprint-based selective access is implemented, then access security is improved, but device complexity increases due to additional authentication and access control mechanisms
Solution Approach 1:
The patent introduces the FTL module as an intermediary between the fingerprint sensor and the storage medium. The FTL module receives the fingerprint key, determines selective access restrictions, and manages the mapping between users and namespaces. This intermediary layer handles the complexity of authentication and access control, shielding the rest of the system from these complexities. The FTL module acts as a mediator that translates biometric authentication into namespace-specific access permissions, improving security while managing complexity centrally rather than distributing it throughout the system.
Data Source
AI summary
A data storage device comprising: a storage medium; a communication interface to enable communication with a host device; and a flash translation layer (FTL) module. The FTL module is configured to: receive a fingerprint key of an enrolled user from a fingerprint sensor; determine selective access restrictions of the enrolled user based on the fingerprint key; and in response, enable the host device selective access to user data in the storage medium in accordance with the selective access restrictions. Selective access is enabled by receiving a corresponding portion of a logical to physical (L2P) table associated with the selective access restrictions of the enrolled user.